Luggage management system and luggage management method

ABSTRACT

A luggage management system includes: a locking/unlocking device mounted in a vehicle and configured to lock and unlock the vehicle in response to a request from a terminal, the terminal being used by a user who delivers luggage; an imaging device configured to capture an image of an inside of a predetermined area located in the vehicle, the predetermined area being used as a delivery place of the luggage; a control device configured to cause the imaging device to capture the image in the predetermined area when the locking/unlocking device locks or unlocks the vehicle in response to the request, and store the image; and a determination unit configured to determine, based on a result of comparison between a reference image and a comparison image, whether the luggage has been carried away from the predetermined area.

INCORPORATION BY REFERENCE

This application is a continuation of U.S. patent application Ser. No.16/793,490 filed Feb. 18, 2020, which is a continuation of U.S. patentapplication Ser. No. 16/214,534 filed Dec. 10, 2018, which claims thebenefit of Japanese Priority Patent Application No. 2017-237975 filed onDec. 12, 2017, the entire contents of which are incorporated herein byreference.

BACKGROUND 1. Technical Field

The disclosure relates to a luggage management system and a luggagemanagement method.

2. Description of Related Art

Recently, a delivery system in which a cargo compartment of a vehiclewhich is designated by a user is used as a pickup and delivery place ofluggage has been developed as means for efficiently performing pickupand delivery of luggage between a user of a delivery service and adeliverer. For example, Japanese Unexamined Patent ApplicationPublication No. 2006-206225 (JP 2006-206225 A) has proposed a systemthat performs an authentication process between a delivery user terminalof a deliverer and a vehicle communication device mounted in adesignated vehicle when the deliverer delivers luggage, and permitslocking and unlocking of the designated vehicle when the authenticationhas succeeded.

SUMMARY

In such a delivery system, when delivery of luggage is performed by aplurality of deliverers with time differences therebetween, a laterdeliverer may accommodate luggage in a cargo compartment in a state inwhich luggage is already accommodated in the cargo compartment. In thiscase, there is concern that the deliverer may carry away the existingluggage. At this time, it is conceivable that the deliverer may notaccommodate luggage in the cargo compartment and carry away luggagetherein when opening and closing a door of the cargo compartment.

The disclosure provides a technique capable of contributing toimprovement in security when a cargo compartment of a vehicle is used asa pickup and delivery place of luggage.

A first aspect of the disclosure provides a luggage management systemincluding: a locking/unlocking device mounted in a vehicle andconfigured to lock and unlock the vehicle in response to a request froma terminal, the terminal being used by a user who delivers luggage; animaging device configured to capture an image of an inside of apredetermined area located in the vehicle, the predetermined area beingused as a delivery place of the luggage; a control device configured tocause the imaging device to capture the image of the inside of thepredetermined area when the locking/unlocking device locks or unlocksthe vehicle in response to the request, and store the image; and adetermination unit configured to determine, based on a result ofcomparison between a reference image representing the inside of thepredetermined area and a comparison image representing the inside of thepredetermined area when the vehicle is locked, whether the luggage hasbeen carried away from the predetermined area.

A user can access a predetermined area by unlocking a vehicle using alocking/unlocking device, and a user cannot access the predeterminedarea when the vehicle is locked using the locking/unlocking device.Before and after a delivery user accommodates luggage in thepredetermined area, a state in the predetermined area changes and thischange can be detected by the imaging device. Accordingly, according tothis configuration, it is possible to determine whether luggage has beenaccommodated in the predetermined area or whether luggage has beencarried out from the predetermined area based on an image captured bythe imaging device.

For example, when an increase in the amount of luggage in thepredetermined area can be determined from the image, it can bedetermined that luggage has been accommodated in the predetermined area.When a decrease in the amount of luggage in the predetermined area canbe determined from the image, it can be determined that luggage has beencarried away from the predetermined area. When it can be determined fromthe image that there is no change in the predetermined area, luggage hasnot been newly accommodated in the predetermined area and thus it can bedetermined that luggage to be delivered has been carried away. When theimaging device can identify luggage based on features (color or size) ofan image, replacement of luggage or the like can be determined.

Here, carrying-way of luggage can occur in a period in which a deliveryuser can access the predetermined area. Accordingly, the control unitcauses the imaging device to image the inside of the predetermined areaat a time at which it can be determined that the state in thepredetermined area has changed or has not changed until the vehicle hasbeen locked after the vehicle has been unlocked. The operation ofcausing the imaging device to capture an image at that time, which isperformed by the control unit, corresponds to an operation of causingthe imaging device to image the inside of the predetermined area at thetimes of locking/unlocking of the vehicle with the locking/unlockingdevice. When the control unit stores an image captured in this way, itcan be determined whether luggage has been carried away based on thestored image and thus it is possible to contribute to improvement insecurity.

In the first aspect, the control device may be configured to acquire thecomparison image by causing the imaging device to capture a first imageof the inside of the predetermined area at a locking-associated time,the locking-associated time being associated with a time at which thevehicle is locked.

In the first aspect, the control device may be configured to acquire thereference image by determining the comparison image as the referenceimage after the determination unit determines whether the luggage hasbeen carried away from the predetermined area.

The locking-associated time is also a time at which a state associatedwith the state in the predetermined area when the vehicle has beenlocked can be imaged. This is also a time after the delivery user hasaccommodated luggage in the predetermined area or after the deliveryuser has carried away luggage from the predetermined area. When thevehicle has been locked, a delivery user cannot access the predeterminedarea and the state in the predetermined area cannot be changed by thedelivery user. Accordingly, according to this configuration, it ispossible to store an image indicating the state in the predeterminedarea after a delivery user has accessed the predetermined area.

In the first aspect, the control device may be configured to acquire thereference image by causing the imaging device to capture a second imageof the inside of the predetermined area at an unlocking-associated time,the unlocking-associated time being associated with a time at which thevehicle is unlocked.

The unlocking-associated time is also a time at which a state associatedwith the state in the predetermined area when the vehicle has beenunlocked can be imaged. This is also a time before a delivery user hasaccommodated luggage in the predetermined area or before the deliveryuser has carried away luggage from the predetermined area. Until thevehicle is unlocked after the vehicle has been locked, a delivery usercannot access the predetermined area and thus a delivery user cannotcarry way luggage from the predetermined area in this period. On theother hand, when the vehicle has been unlocked, a delivery user canaccess the predetermined area and the state in the predetermined areacan change. Accordingly, according to this configuration, it is possibleto store an image indicating the state in the predetermined area at atime point at which a delivery user can access the predetermined area.

In the first aspect, the control device may be configured to cause theimaging device to capture a moving image from the unlocking-associatedtime to the locking-associated time.

According to this configuration, when and how luggage has been carriedaway can be stored as evidence. Since a still image can be extractedfrom a moving image, a still image at a next unlocking-associated timeand a still image at a next locking-associated time can also begenerated by capturing a moving image.

In the first aspect, the luggage management system may include adetection unit configured to detect opening and closing of thepredetermined area, wherein the unlocking-associated time may be a timeat which the detection unit detects that the predetermined area isopened.

The predetermined area can be opened and closed by unlocking thevehicle. Until the predetermined area is opened after the vehicle hasbeen unlocked, a delivery user cannot access the predetermined area andthus the state in the predetermined area does not change. Accordingly, acaptured image of the predetermined area when the predetermined area hasbeen opened can be said to represent the inside of the predeterminedarea before the vehicle has been unlocked. According to thisconfiguration, by setting a time point at which a delivery user canactually access the predetermined area as the unlocking-associated time,for example, an imaging time when a moving image is captured can beshortened and thus it is possible to decrease a memory capacity requiredfor storing the moving image and to decrease power consumption of abattery.

In the first aspect, the luggage management system may include adetection unit configured to detect opening and closing of thepredetermined area, wherein the locking-associated time may be a time atwhich the detection unit detects that the predetermined area is closed.

When the predetermined area is closed before the vehicle has beenlocked, a delivery user cannot access the predetermined area.Accordingly, a captured image of the predetermined area when thepredetermined area has been closed can be said to represent the insideof the predetermined area after the vehicle has been locked. Accordingto this configuration, by setting an end point at which a delivery usercan actually access the predetermined area as the locking-associatedtime, for example, an imaging time when a moving image is captured canbe shortened and thus it is possible to decrease a memory capacity forstoring the moving image and to decrease power consumption of a battery.

In the first aspect, the unlocking-associated time may be a time atwhich the locking/unlocking device unlocks the vehicle in response tothe request.

In the first aspect, the locking-associated time may be a time at whichthe locking/unlocking device locks the vehicle in response to therequest.

A time at which the vehicle is locked and unlocked by thelocking/unlocking device is controlled by the locking/unlocking device.Accordingly, according to this configuration, it is possible to set anunlocking-associated time and a locking-associated time withoutproviding means for detecting opening and closing of the predeterminedarea.

In the first aspect, the determination unit may be configured todetermine the second image as the reference image, the second imagebeing captured by the imaging device at the unlocking-associated timeand the first image as the comparison image, the first image beingcaptured by the imaging device at the locking-associated time.

According to this configuration, it is possible to detect a differencebetween an image captured at the unlocking-associated time and an imagecaptured at the locking-associated time through comparison therebetweenand to determine that a delivery user has carried away luggage when theluggage appearing in the image captured at the unlocking-associated timeis not present in the image captured at the locking-associated time.When luggage not appearing in the image captured at theunlocking-associated time is present in the image captured at thelocking-associated time, it is possible to determine that a deliveryuser has accommodated the luggage. When there is no change between theimage captured at the unlocking-associated time and the image capturedat the locking-associated time, it is possible to determined thatluggage to be delivered has not been delivered but carried away.

In the first aspect, the determination unit may be configured todetermine a previous image as the reference image, the previous imagebeing captured by the imaging device at a previous locking-associatedtime and a current image as the comparison image, the comparison imagebeing captured by the imaging device at a current locking-associatedtime.

It is assumed that a delivery user cannot access the predetermined areain a time period from a previous locking-associated time to a currentunlocking-associated time, and thus it can be assumed that there will beno change in the predetermined in the time period. According to thisconfiguration, an image at a previous locking-associated time can beused as an image at a time corresponding to a currentunlocking-associated time. By decreasing the number of times ofacquisition of an image in this way, it is possible to simplify thesystem.

In the first aspect, the luggage management system may include a massacquiring unit configured to acquire an acquired mass of the luggage tobe delivered to the predetermined area before delivery of the luggageand a mass detecting unit configured to detect a detected mass of theluggage in the vehicle, wherein the determination unit may be configuredto determine, based on a result of comparison between the acquired massof the luggage and the detected mass of the luggage, whether the luggagehas been carried away from the predetermined area.

When a plurality of pieces of luggage has been accommodated in thepredetermined area, it is conceivable that a piece of luggageaccommodated in an area hidden by another piece of luggage when seenfrom the imaging device will not appear in a captured image. It is alsoconceivable that a delivery user may accommodate only an outer case ofluggage in the predetermined area and carries away contents thereof.Carrying-away of contents cannot be detected from a captured image. Inthis way, it may be difficult to determine whether luggage has beencarried away based on only the captured image. On the other hand, it isconceivable that a mass of luggage may also be considered in determiningwhether luggage has been carried away. That is, when luggage has beenaccommodated in the predetermined area, the total mass of luggage in thepredetermined area increases by the mass of the newly accommodatedluggage. Accordingly, when luggage does not appear in an image but themass in the predetermined area increases by the mass of luggage to bedelivered, it is possible to determine that the luggage has beenaccommodated. On the other hand, when contents of luggage have beencarried away and only the outer case thereof has been accommodatedtherein, the total mass of luggage in the predetermined area will notincrease by the mass of the luggage to be delivered and thus it ispossible to determine that the luggage has not been accommodated.Accordingly, according to this configuration, it is possible to preventerroneous determination by determining whether luggage has been carriedaway in consideration of a mass of luggage in addition to an image inthe predetermined area.

In the first aspect, the luggage management system may include a requestuser terminal, the request user terminal being used by a user whoreceives the luggage, and the request user terminal being configured torequest the locking/unlocking device to lock and unlock the vehicle,wherein the determination unit may be configured to inquire of therequest user terminal about whether the luggage has been taken out fromthe predetermined area when the request user terminal requestslocking/unlocking of the vehicle, and reset the previous image, when therequest user terminal returns a response indicating that the luggage hasbeen taken out in response to an inquiry from the determination unit.

When a user who receives luggage (hereinafter also referred to as arequest user) has carried away luggage from the predetermined area, arightful user has carried away luggage and thus there is no problem.However, when a delivery user delivers luggage thereafter, the state inthe predetermined area is different from a state based on an imagecaptured by the imaging device at a previous locking-associated time andthus it is not preferable that this image be used to determine whetherluggage has been carried away. Accordingly, when a request user terminalhas returned a response indicating that luggage has been taken out, thecontrol device resets the image captured at the previouslocking-associated time such that the image is not used to determinewhether luggage has been carried away. According to this configuration,it is possible to prevent erroneous determination by determining whetherluggage has been carried away based on a newly stored image.

In the first aspect, the luggage management system may include anotification unit configured to perform a predetermined notificationprocess when the determination unit determines that the luggage has beencarried away from the predetermined area.

According to this configuration, since a user or the like havingrequested delivery of luggage can immediately ascertain carrying-away ofluggage, it is possible to take measures corresponding thereto.

In the first aspect, the luggage management system may further include anotification unit configured to perform a predetermined notificationprocess to a terminal other than the request user terminal when thedetermination unit determines that the luggage has been carried awayfrom the predetermined area.

In the first aspect, the determination unit may be configured to inquireof a request user terminal, the request user terminal being used by auser who receives the luggage, and the request user terminal beingconfigured to request the locking/unlocking device to lock and unlockthe vehicle, about whether the luggage has been taken out from thepredetermined area when the locking/unlocking device is requested by therequest user terminal, and reset the previous image, when a responseindicating that the luggage has been taken out is returned by therequest user terminal.

A second aspect of the disclosure provides a luggage management method.The luggage management method includes: using a predetermined arealocated in a vehicle as a delivery place of luggage; locking andunlocking the vehicle in response to a request from a terminal, theterminal being used by a user who delivers the luggage;

causing an imaging device to capture an image of an inside of thepredetermined area when the vehicle is locked and unlocked in responseto the request; storing the captured image; and determining, based on aresult of comparison between a reference image representing the insideof the predetermined area and a comparison image representing the insideof the predetermined area when the vehicle is locked, whether theluggage has been carried away from the predetermined area.

According to the disclosure, it is possible to contribute to improvementin security when a cargo compartment of a vehicle is used as a pickupand delivery place of luggage.

BRIEF DESCRIPTION OF THE DRAWINGS

Features, advantages, and technical and industrial significance ofexemplary embodiments of the disclosure will be described below withreference to the accompanying drawings, in which like numerals denotelike elements, and wherein:

FIG. 1 is a diagram schematically illustrating a configuration of aluggage management system according to a first embodiment;

FIG. 2 is a block diagram schematically illustrating an example of aconfiguration of the luggage management system according to the firstembodiment;

FIG. 3 is a diagram schematically illustrating arrangements of devicesin a vehicle;

FIG. 4 is a block diagram schematically illustrating an example of aconfiguration of a body ECU;

FIG. 5 is a diagram illustrating a table structure of deliveryinformation;

FIG. 6 is a diagram illustrating a table structure of vehicle managementinformation;

FIG. 7 is a flowchart illustrating a process flow of capturing andstoring a moving image for determining whether luggage has been carriedaway;

FIG. 8 is a flowchart illustrating a flow of a change determiningprocess;

FIG. 9 is a diagram illustrating a flow of operations in the luggagemanagement system when a change determination processing unit determinesthat luggage has been carried away;

FIG. 10 is a diagram illustrating a flow of operations in the luggagemanagement system when the change determination processing unitdetermines that luggage has been carried away;

FIG. 11 is a diagram illustrating a state in which an imaging device isattached to a cargo compartment inside a cargo compartment door;

FIG. 12 is a diagram schematically illustrating a configuration of aluggage management system according to a second embodiment;

FIG. 13 is a block diagram schematically illustrating an example of aconfiguration of the luggage management system according to the secondembodiment;

FIG. 14 is a flowchart illustrating a process flow in a central serverwhen it is determined whether luggage has been carried away;

FIG. 15 is a diagram illustrating a flow of operations in the luggagemanagement system when a change determination processing unit determinesthat luggage has been carried away;

FIG. 16 is a diagram illustrating a flow of operations in the luggagemanagement system when a response indicating that luggage has been takenout is received from a request user;

FIG. 17 is a diagram illustrating a flow of operations in the luggagemanagement system when a delivery management user or a request userascertains whether luggage has been carried away;

FIG. 18 is a diagram illustrating a flow of operations in the luggagemanagement system when a request user terminal gives a notification to arequest user;

FIG. 19 is a block diagram schematically illustrating an example of aconfiguration of a delivery management server;

FIG. 20 is a diagram illustrating a flow of operations in the luggagemanagement system when a delivery user terminal gives a notification toa delivery user;

FIG. 21 is a diagram schematically illustrating a configuration of asheet;

FIG. 22 is a flowchart illustrating a process flow of detecting a massof luggage to determine whether luggage has been carried away; and

FIG. 23 is a flowchart illustrating a flow of a change determiningprocess.

DETAILED DESCRIPTION OF EMBODIMENTS

Hereinafter, specific embodiments of the disclosure will be describedwith reference to the accompanying drawings. Dimensions, materials,shapes, relative positions, and the like of constituent parts describedin the following embodiments are not intended to limit the technicalscope of the disclosure thereto unless this is particularly mentioned.The following embodiments can be combined.

First Embodiment

<System Outline>

FIG. 1 is a diagram schematically illustrating a configuration of aluggage management system 1 according to a first embodiment. The luggagemanagement system 1 is a system that manages luggage in a deliveryservice in which a cargo compartment (a trunk room) of a vehicle 10 isused as a pickup and delivery place of luggage by allowing a person whorequests delivery of luggage and a person to whom the delivery ofluggage is requested to commonly use (share) a cargo compartment of avehicle 10 which is designated by a requester. Accordingly, a “personwho requests delivery of luggage” and a “person to whom delivery ofluggage is requested” are users who use the cargo compartment of thevehicle 10, and the former is referred to as a “request user” and thelatter is referred to as a “pickup and delivery user” to distinguishboth persons from each other. The cargo compartment is a predeterminedarea in the vehicle 10 which can accommodate luggage to be delivered andwhich is configured to be locked and unlocked by an onboard unit 10A aswill be described later. The cargo compartment may be, for example, atrunk of a vehicle or a passenger compartment such as a passenger seat.The cargo compartment is an area which is partitioned from a passengercompartment in which a driver or the like of the vehicle 10 sits suchthat the cargo compartment and the passenger compartment cannot beaccessed from each other.

In the example illustrated in FIG. 1, the luggage management system 1includes an onboard unit 10A that is installed in a vehicle 10, adelivery user terminal 200, a request user terminal 50, a central server400, and delivery management servers 500A and 500B. The onboard unit10A, the delivery user terminal 200, the request user terminal 50, thecentral server 400, and the delivery management server 500A and 500B areconnected to each other via a network N1. The network N1 may be, forexample, a global public communication network such as the Internet, anda wide area network (WAN) or other communication networks may beemployed. The network N1 may include a telephone communication networkfor mobile phones and the like and a wireless communication network suchas WiFi. The onboard unit 10A is connected to the delivery user terminal200 which is a terminal used by a delivery user via a network N2including a short-range radio communication network or the like. Forexample, the luggage management system 1 includes two deliverymanagement servers 500A and 500B, but may include three or more deliverymanagement servers. When the delivery management servers arecollectively mentioned in the following description, 500 is used as areference sign thereof.

The delivery management server 500 receives registration of an articleto be delivered (hereinafter also referred to as “luggage”) from arequest user terminal 50 which is a terminal used by a request user. Forexample, when an article purchased from a product purchase site openedby an electronic transaction provider is delivered as luggage to arequest user, the request user can register delivery information of theluggage in the delivery management server 500 through an application forutilizing a service using the luggage management system 1 (hereinafteralso referred to as a predetermined application) which is installed in arequest user terminal 50. The delivery information includesidentification information of the request user and delivery scheduleinformation as illustrated in FIG. 5 which will be described later. Inthe delivery management server 500, the identification information ofthe request user is also correlated in advance with a vehicle 10correlated with the request user, and a delivery place to be used isappropriately selected from candidates for the delivery place associatedwith the user (the request user) including the vehicle 10 and isincluded in the delivery information by the request user. In thefollowing description, it is assumed that the delivery place of therequest user is set to a vehicle 10. The delivery information furtherincludes information on a status of luggage. An example of the statusinformation is information on whether delivery of luggage has beencompleted or the like.

It is assumed that the delivery management server 500A and the deliverymanagement server 500B illustrated in FIG. 1 are managed by differentdelivery companies. Accordingly, delivery of luggage based on thedelivery information which is managed by the delivery management server500A is performed by a delivery company other than a delivery companythat performs delivery of luggage based on the delivery informationwhich is managed by the delivery management server 500B. When deliveryusers belonging to the delivery companies that manage the deliverymanagement servers 500A and 500B are distinguished from each other, itis assumed in the following description that a suffix is added theretolike a delivery user A and a delivery user B.

When a request for delivery of luggage is received from a request userterminal 50 and a delivery place thereof is a vehicle 10, the deliverymanagement server 500 requests the central server 400 to transmitauthentication information for locking/unlocking the vehicle 10 in whichthe luggage will be accommodated (also referred to as “locking/unlockinga cargo compartment of the vehicle 10 in which the luggage isaccommodated”) to a delivery user terminal 200. The request istransmitted with a request from the delivery user terminal 200 as atrigger. The central server 400 transmits authentication information forthe vehicle 10 correlated with identification information of the requestuser to the delivery user terminal 200 via the delivery managementserver 500 based on the identification information of the request userincluded in the delivery information. The delivery user can access thecargo compartment of the vehicle 10 to deliver the luggage bylocking/unlocking the cargo compartment of the vehicle 10 using theauthentication information received by the delivery user terminal 200.Here, the authentication information is digital information which isused to allow an onboard unit 10A to perform a locking/unlocking processfor the cargo compartment of the vehicle 10 by being transmitted fromthe delivery user terminal 200 to the onboard unit 10A by short-rangeradio communication and being subjected to an authentication process bythe onboard unit 10A. The locking/unlocking process for the cargocompartment of the vehicle 10 is a process of locking/unlocking a doorof the cargo compartment of the vehicle 10 in which luggage isaccommodated through the onboard unit 10A of which details will bedescribed later.

FIG. 2 is a block diagram schematically illustrating an example ofconfigurations of an onboard unit 10A, a delivery user terminal 200, arequest user terminal 50, a delivery management server 500, and acentral server 400 which constitute the luggage management system 1. Thehardware configurations and the functional configurations of the onboardunit 10A, the delivery user terminal 200, the request user terminal 50,the delivery management server 500, and the central server 400 will bedescribed below with reference to FIG. 2.

The onboard unit 10A includes a key unit 100, a locking/unlocking device300, an imaging device 11, an image storage unit 12, and a notificationunit 13. The key unit 100 includes the same radio interface as anelectronic key of a smart key (hereinafter referred to as a portableunit), and can perform locking and unlocking of a cargo compartment or apassenger compartment of a vehicle 10 (hereinafter may be simplyreferred to as “locking and unlocking of a vehicle 10” when the cargocompartment and the passenger compartment do not need to bedistinguished) without using any physical key by communication with thelocking/unlocking device 300 of the onboard unit 10A. The key unit 100performs short-range radio communication with a mobile terminal such asa delivery user terminal 200 and determines whether it serves as anelectronic key of the vehicle 10 based on the result of anauthentication process for the delivery user terminal 200.

The delivery user terminal 200 receives authentication information forlocking and unlocking the cargo compartment, which is issued by thecentral server 400, via the delivery management server 500 as describedabove when accessing the cargo compartment of the vehicle 10 fordelivery of luggage. Then, the authentication information transmittedfrom the delivery user terminal 200 to the key unit 100 is compared withauthentication information stored in advance in the key unit 100. Whenthe authentication process has succeeded, the delivery user terminal 200is authenticated as a terminal that rightly operates the onboard unit10A. When the delivery user terminal 200 has been authenticated, the keyunit 100 transmits a key ID of the vehicle 10, which is stored inadvance in the key unit 100 and correlated with the authenticationinformation, to the locking/unlocking device 300 along with a lockingsignal or an unlocking signal. In the following description, a lockingsignal and an unlocking signal are collectively referred to as alocking/unlocking signal. The term, locking/unlocking signal, representsat least one of a locking signal and an unlocking signal. Thelocking/unlocking device 300 locks or unlocks the vehicle 10 when thekey ID received from the key unit 100 coincides with a key ID stored inadvance in the locking/unlocking device 300. The key unit 100 and thelocking/unlocking device 300 operate with electric power which issupplied from a battery mounted in the vehicle 10. The key ID stored inadvance in the key unit 100 may be encrypted with authenticationinformation. In this case, when the authentication process for thedelivery user terminal 200 has succeeded, the key unit 100 can decryptthe key ID with the authentication information and transmit thedecrypted key ID to the locking/unlocking device 300.

Details of the locking/unlocking device 300 will be described below. Thelocking/unlocking device 300 is a device that locks and unlocks a doorof a passenger compartment or a cargo compartment of a vehicle 10. Forexample, the locking/unlocking device 300 locks and unlocks the door ofthe vehicle 10 in accordance with a locking signal and an unlockingsignal which are transmitted from a portable unit corresponding to thevehicle 10 using radio waves of a radio frequency (hereinafter referredto as RF) band. The locking/unlocking device 300 also has a function oftransmitting radio waves of a low frequency (hereinafter referred to asLF) band for detecting the portable unit.

In this embodiment, the key unit 100 instead of the mobile unit controlslocking and unlocking of the door of the vehicle 10 by transmitting andreceiving radio waves of an RF band and an LF band to and from thelocking/unlocking device 300. In the following description, unlessotherwise mentioned, the communication destination of thelocking/unlocking device 300 is limited to the key unit 100.

The locking/unlocking device 300 includes an LF transmitter 301, an RFreceiver 302, a comparison ECU 303, a body ECU 304, a door lock actuator305, and a door switch 306. The LF transmitter 301 is means thattransmits radio waves of an LF band (for example, 100 KHz to 300 KHz)for detecting (polling) the key unit 100. The LF transmitter 301 isincorporated, for example, into a center console or in the vicinity of asteering wheel in the passenger compartment. The RF receiver 302 ismeans that receives radio waves of an RF band (for example, 100 MHz to 1GHz) transmitted from the key unit 100. The RF receiver 302 isincorporated at any position in the passenger compartment.

The comparison ECU 303 is a computer that performs control for lockingand unlocking the door of the passenger compartment or the cargocompartment of the vehicle 10 based on a signal (a locking signal or anunlocking signal) transmitted from the key unit 100 using radio waves ofan RF band. The comparison ECU 303 is constituted, for example, by amicrocomputer.

The comparison ECU 303 authenticates whether the locking/unlockingsignal transmitted from the key unit 100 has been transmitted from arightful device. Specifically, the comparison ECU 303 determines whetherthe key ID included in the locking/unlocking signal coincides with thekey ID stored in advance in a storage unit (not illustrated) of thecomparison ECU 303. Then, the comparison ECU 303 transmits an unlockingcommand or a locking command to the body ECU 304 based on thedetermination result. The unlocking command or the locking command istransmitted via an onboard network such as a controller area network(CAN).

FIG. 3 is a diagram schematically illustrating arrangements of thedevices in the vehicle 10. The door lock actuator 305 is an actuatorthat locks and unlocks the door of the vehicle 10 (such as a passengercompartment door which is opened and closed at the time of getting inand out of the passenger compartment as a boarding space or a cargocompartment door 16 which is opened and closed at the time of loadingluggage in the cargo compartment 15). The door lock actuator 305operates based on a signal transmitted from the body ECU 304. The doorlock actuator 305 may be configured to independently lock and unlock thepassenger compartment door and the cargo compartment door 16 of thevehicle 10. The door lock actuator 305 that locks and unlocks the cargocompartment door 16 is illustrated in FIG. 3. A hatched area in FIG. 3is an area which is imaged by the imaging device 11.

The door switch 306 is a switch that is switched to ON when the door ofthe vehicle 10 is opened and is switched to OFF when the door of thevehicle 10 is closed. In FIG. 3, the door switch 306 that detectsopening and closing of the cargo compartment door 16 is illustrated. AnON/OFF signal of the door switch 306 is input to the body ECU 304. Thedoor switch 306 may serve as a “detection unit” in the claims.

The body ECU 304 is a computer that executes body control of the vehicle10. FIG. 4 is a block diagram schematically illustrating an example of aconfiguration of the body ECU 304. The body ECU 304 includes alocking/unlocking processing unit 3041, a change determinationprocessing unit 3042, an imaging processing unit 3043, and an alarmprocessing unit 3044. The locking/unlocking processing unit 3041 has afunction of simultaneously or independently performing unlocking andlocking of the passenger compartment door or the cargo compartment door16 of the vehicle 10 by controlling the door lock actuator 305 based onthe unlocking command or the locking command received from thecomparison ECU 303. The comparison ECU 303 and the body ECU 304 may beembodied as a single body. The change determination processing unit3042, the imaging processing unit 3043, and the alarm processing unit3044 will be described later.

The key unit 100 will be described now. The key unit 100 is a devicethat is disposed at a predetermined position (for example, inside aglove box) in the passenger compartment of the vehicle 10. The key unit100 has a function of authenticating a delivery user terminal 200 byperforming short-range radio communication with the delivery userterminal 200 or the like and a function of transmitting alocking/unlocking signal using radio waves of an RF band based on theauthentication result. The key unit 100 includes an LF receiver 101, anRF transmitter 102, a short-range communication unit 103, and a controlunit 104.

The LF receiver 101 is means that receives a polling signal transmittedfrom the locking/unlocking device 300 using radio waves of an LF band.The LF receiver 101 includes an antenna for receiving radio waves of anLF band (hereinafter referred to as an LF antenna). The RF transmitter102 is means that transmits a locking/unlocking signal to thelocking/unlocking device 300 using radio waves of an RF band.

The short-range communication unit 103 is means that communicates with adelivery user terminal 200. The short-range communication unit 103performs communication in a short range (at a distance at whichcommunication can be performed between the interior and the exterior ofthe vehicle) using a predetermined radio communication standard. In thisembodiment, the short-range communication unit 103 performs datacommunication based on a Bluetooth (registered trademark) Low Energystandard (hereinafter referred to as BLE). BLE is a low-energycommunication standard using Bluetooth, and is characterized in thatcommunication can be started immediately when a communication partnerhas been detected without requiring pairing between devices. In thisembodiment, BLE is exemplified, but another radio communication standardcan also be used. For example, near field communication (NFC), ultrawideband (UWB), or WiFi (registered trademark) may be used.

The control unit 104 is a computer that performs short-range radiocommunication with a delivery user terminal 200 via the short-rangecommunication unit 103 and performs control for authenticating thedelivery user terminal 200 and control for transmitting alocking/unlocking signal based on the authentication result. The controlunit 104 is constituted, for example, by a microcomputer.

The control unit 104 includes a storage unit 1041 and an authenticationunit 1042. A control program for controlling the key unit 100 is storedin the storage unit 1041. The control unit 104 may realize variousfunctional units including the authentication unit 1042 by causing a CPUwhich is not illustrated to execute the control program stored in thestorage unit 1041. For example, the control unit 104 may realize afunction of receiving a polling signal transmitted as radio waves of anLF band from the locking/unlocking device 300 via the LF receiver 101, afunction of transmitting a locking/unlocking signal as radio waves of anRF band to the locking/unlocking device 300 via the RF transmitter 102,a function of processing communication with the delivery user terminal200 which is performed by the short-range communication unit 103, and afunction of generating a locking/unlocking signal when authentication ofthe delivery user terminal 200 by the authentication unit 1042 hassucceeded.

The authentication unit 1042 authenticates the delivery user terminal200 based on authentication information included in a locking request oran unlocking request (hereinafter collectively referred to as alocking/unlocking request) transmitted from the delivery user terminal200. Specifically, the authentication unit 1042 compares theauthentication information transmitted from the delivery user terminal200 with the authentication information stored in the storage unit 1041and determines that the authentication has succeeded when they satisfy apredetermined relationship. When the two pieces of authenticationinformation do not satisfy the predetermined relationship, theauthentication unit 1042 determines that authentication has failed.Here, the predetermined relationship includes a case in which theauthentication information stored in the storage unit 1041 coincideswith the authentication information transmitted from the delivery userterminal 200, a case in which results of predetermined processes such asencryption and decryption using the two pieces of authenticationinformation coincide with each other, and a case in which a result ofdecryption on one of the two pieces of authentication informationcoincides with that on the other thereof.

When the authentication of the delivery user terminal 200 by theauthentication unit 1042 has succeeded, a locking/unlocking signalgenerated in response to a request received from the delivery userterminal 200 is transmitted to the locking/unlocking device 300 via theRF transmitter 102. In the following description, the authenticationinformation stored in the key unit 100 is referred to as deviceauthentication information and the authentication informationtransmitted from the delivery user terminal 200 is referred to asterminal authentication information, if necessary.

The key unit 100 transmits the key ID along with the locking/unlockingsignal to the locking/unlocking device 300. The key ID may be stored inthe key unit 100 in a plaintext state in advance or may be stored in astate in which it is encrypted using a cipher specific to the deliveryuser terminal 200. When the key ID is stored in the encrypted state, theencrypted key ID may be decrypted using the authentication informationtransmitted from the delivery user terminal 200 to acquire the originalkey ID.

Then, the imaging device 11 is disposed in the cargo compartment 15 ofthe vehicle 10 and captures an image in the cargo compartment 15. Theimaging device 11 is, for example, a camera that captures an image usingan imaging element such as a charge coupled device (CCD) image sensor ora complementary metal oxide semiconductor (CMOS) image sensor. An imageacquired by the imaging may be any of a still image and a moving image,and it is assumed in this embodiment that the imaging device 11 capturesa moving image. Similarly to the key unit 100 and the locking/unlockingdevice 300, the imaging device 11 operates with electric power which issupplied from a battery mounted in the vehicle 10.

The image storage unit 12 stores image data such as moving image datacaptured by the imaging device 11 or still image data extracted from themoving image using an erasable programmable ROM (EPROM), a hard diskdrive (HDD), a removable medium, or the like. The removable medium is,for example, a universal serial bus (USB) memory or a disc recordingmedium such as a compact disc (CD) or a digital versatile disc (DVD).The notification unit 13 performs a predetermined notification processbased on process results in a change determining process which will bedescribed later. The predetermined notification process will bedescribed later.

In this way, the onboard unit 10A performs a sequence of processes ofperforming the authentication process using the key unit 100, operatingthe locking/unlocking device 300, and locking or unlocking the passengercompartment or the cargo compartment of the vehicle 10 with theauthentication information transmitted from the delivery user terminal200 as a trigger.

The delivery user terminal 200 will be described now. The delivery userterminal 200 is a small portable computer such as a smartphone, a mobilephone, a tablet terminal, a personal information terminal, or a wearablecomputer (such as a smart watch). The delivery user terminal 200 may bea personal computer (PC) that is connected to the delivery managementserver 500 via the network N1 such as the Internet which is a publiccommunication network. The delivery user terminal 200 includes ashort-range communication unit 201, a communication unit 202, a controlunit 203, and an input and output unit 204.

The short-range communication unit 201 is means that performscommunication with the key unit 100 using the same radio communicationstandard as the short-range communication unit 103 of the key unit 100.A network which is set up between the short-range communication unit 201and the key unit 100 is illustrated as N2 in FIG. 1. The communicationunit 202 is communication means that connects the delivery user terminal200 to the network N1. In this embodiment, the communication unit 202can communicate with another device (for example, the deliverymanagement server 500) via the network N1 using a mobile communicationservice such as 3G (3^(rd) Generation) or LTE (Long Term Evolution).

The control unit 203 is a computer that takes charge of control of thedelivery user terminal 200. The control unit 203 performs, for example,a process of acquiring the terminal authentication information, aprocess of generating a locking/unlocking request including the acquiredterminal authentication information, a process of transmitting thegenerated locking/unlocking request to the key unit 100, and the like.The control unit 203 is constituted, for example, by a microcomputer,and the functions of performing the above-mentioned processes arerealized by causing a CPU (not illustrated) to execute a program storedin storage means (such as a ROM) (not illustrated).

The control unit 203 performs an interaction with a delivery user viathe input and output unit 204. The input and output unit 204 is meansthat receives an input operation which has been performed by thedelivery user and presents information to the delivery user.Specifically, the input and output unit 204 includes a touch panel andcontrol means thereof and a liquid crystal display and control meansthereof. The touch panel and the liquid crystal display are constitutedas a single touch panel display in this embodiment.

The control unit 203 displays an operation screen on the input andoutput unit 204 and generates a locking/unlocking request based on anoperation which has been performed by the delivery user. For example,the control unit 203 outputs an icon for unlocking, an icon for locking,and the like to the touch panel display and generates an unlockingrequest or a locking request based on the operation which has beenperformed by the delivery user. The operation which is performed by thedelivery user is not limited to an operation using the touch paneldisplay. For example, the operation may be performed using a hardwareswitch.

The control unit 203 performs a process of acquiring terminalauthentication information from the central server 400. The terminalauthentication information is not information (a key ID) which is usedfor the locking/unlocking device 300 to authenticate the key unit 100,but is information which is used for the key unit 100 to authenticatethe delivery user terminal 200 (for example, authentication informationcorresponding to authentication information specific to the key unit 100mounted in the vehicle 10). Specifically, the control unit 203 transmitsa request for issuance of terminal authentication information to thecentral server 400 via the delivery management server 500 using thecommunication unit 202. The “request for issuance of terminalauthentication information” mentioned herein includes identificationinformation of the delivery user terminal 200 and a signal forrequesting issuance of terminal authentication information specific tothe key unit 100. The central server 400 having received the request forissuance of terminal authentication information acquires the terminalauthentication information specific to the key unit 100 mounted in thevehicle 10 and transmits the acquired terminal authenticationinformation to the delivery user terminal 200. Accordingly, the deliveryuser terminal 200 can perform an operation of unlocking the vehicle 10.When the delivery user terminal 200 does not store the terminalauthentication information, a locking operation and an unlockingoperation on the operation screen are not possible.

In this embodiment, the terminal authentication information acquired bythe delivery user terminal 200 may be a one-time key which isinvalidated with locking of the cargo compartment door 16 due to endingof a delivery operation by a delivery user as a trigger. For example, ata time at which the terminal authentication information transmitted fromthe central server 400 is received by the delivery user terminal 200,the terminal authentication information may be stored in a storage unit(not illustrated) of the delivery user terminal 200. Thereafter, forexample, at a time at which an unlocking notification transmitted fromthe key unit 100 is received by the delivery user terminal 200 whenlocking of the cargo compartment door 16 due to ending of the deliveryoperation has been performed, the terminal authentication information isdeleted from the storage unit.

The time at which the terminal authentication information stored in thestorage unit of the delivery user terminal 200 is deleted is not limitedto the above-mentioned example, and may be a time at which apredetermined time has elapsed from a time point at which the deliveryuser terminal 200 has received the terminal authentication informationtransmitted from the central server 400 (or a time point at which thecentral server 400 has transmitted the terminal authenticationinformation to the delivery user terminal 200). The terminalauthentication information is not limited to the above-mentionedone-time key, and may be a limited key which is valid in only apredetermined time period. It is assumed that device authenticationinformation corresponding to the terminal authentication information isstored in advance in the key unit 100 regardless of whether the terminalauthentication information is a one-time key or a limited key.

The request user terminal 50 will be described below. Similarly to thedelivery user terminal 200, the request user terminal 50 may be, forexample, a small computer such as a smartphone, a mobile phone, a tabletterminal, a personal information terminal, or a wearable computer (suchas a smart watch) or may be a personal computer (PC). The request userterminal 50 includes a communication unit 51, a control unit 52, aninput and output unit 53, and a short-range communication unit 54.

The communication unit 51 is communication means for connection to thenetwork N1, which is functionally the same as the communication unit202. The control unit 52 is a computer that takes charge of control ofthe request user terminal 50. The control unit 52 is constituted, forexample, by a microcomputer, and functions of performing variousprocesses are realized by causing a CPU (not illustrated) to execute aprogram stored in storage means (such as a ROM) (not illustrated). Theinput and output unit 53 is means that receives an input operation whichhas been performed by a request user and provides information to therequest user, which is functionally the same as the input and outputunit 204.

The short-range communication unit 54 is means that communicates withthe key unit 100 using the same communication standard as theshort-range communication unit 103 of the key unit 100. By causing thecontrol unit 52 to perform a process of acquiring terminalauthentication information from the central server 400 and to transmitthe acquired terminal authentication information to the key unit 100 viathe short-range communication unit 54 by short-range radiocommunication, the locking/unlocking device 300 can be operated by therequest user terminal 50.

The delivery management server 500 will be described now. The deliverymanagement server 500 has a general configuration of a computer, and atleast one delivery management server is provided as a management serverof each delivery company when a plurality of delivery companiesparticipate in the luggage management system 1 as described above. Thedelivery management server 500 is, for example, a computer including aprocessor (not illustrated) such as a central processing unit (CPU) or adigital signal processor (DSP), a main storage unit (not illustrated)such as a random access memory (RAM) and a read only memory (ROM), andan auxiliary storage unit (not illustrated) such as an erasableprogrammable ROM (EPROM), a hard disk drive (HDD), and a removablemedium. The removable medium is, for example, a universal serial bus(USB) memory or a disc recording medium such as a compact disc (CD) or adigital versatile disc (DVD). An operating system (OS), variousprograms, various tables, and the like are stored in the auxiliarystorage unit, and functions corresponding to a predetermined purpose canbe realized by loading a program stored therein into a work area of themain storage unit, executing the loaded program, and controlling theconstituent units through execution of the program.

The delivery management server 500 further includes a communication unit501. The communication unit 501 is connected to another device andperforms communication between the delivery management server 500 andthe other device (for example, the central server 400 or the deliveryuser terminal 200). The communication unit 501 is, for example, a localarea network (LAN) interface board or a radio communication circuit forradio communication. The LAN interface board or the radio communicationcircuit is connected to the network N1 such as the Internet which is apublic communication network.

The delivery management server 500 includes a delivery managementdatabase (DB) 503 that stores the above-mentioned delivery information.The delivery management DB 503 is configured by storing the deliveryinformation in the auxiliary storage unit in which a request user andthe delivery information are correlated with each other. The deliverymanagement DB 503 is constructed by causing a program of a databasemanagement system (DBMS) which is executed by the processor to managedata stored in the auxiliary storage unit. The delivery management DB503 is, for example, a relational database.

A structure of delivery information stored in the delivery management DB503 will be described below with reference to FIG. 5. FIG. 5 illustratesa table structure of delivery information, and a delivery informationtable includes fields of request user ID, delivery date and time,delivery place, delivery status, and luggage attributes. Identificationinformation for identifying a request user is input to the field ofrequest user ID. Information indicating a date and time at which luggageis delivered is input to the field of delivery date and time, and aspecific time may be input as the delivery time or a specific timeperiod in which delivery is requested may be input as the delivery time.Information indicating whether delivery of luggage has been completed bya delivery user is input to the field of delivery status. For example,“completed” is input when the delivery of luggage has been completed,and “not completed” is input thereto when the delivery of luggage hasnot been completed. Attribute information such as a weight and a size ofluggage is input to the field of luggage attributes.

In the delivery management server 500, a control unit 502 is embodied asa functional unit by execution of a program by the processor. Thecontrol unit 502 performs management and control of registration andupdate of delivery information in the delivery management DB 503 or thelike. For example, when a request user requests delivery of luggageusing the request user terminal 50, the control unit 502 correlates thedelivery date and time, the delivery place, and the like with theidentification information of the request user, generates deliveryinformation corresponding to the request user, and stores the generateddelivery information in the delivery management DB 503. When aninformation change notification of the delivery date and time or thedelivery place has been transmitted from the request user after thedelivery information has been generated, the control unit 502 updatesthe delivery information stored therein in response to the change. Thecontrol unit 502 communicates with the delivery user terminal 200 viathe communication unit 501 and also updates information on a status ofluggage included in the delivery information. For example, the controlunit 502 receives the status information (for example, informationindicating completion of delivery) which has been input from thedelivery user terminal 200 via the input and output unit 204 by adelivery user and updates the corresponding delivery information.

Vehicle management information in which a request user and a vehicle 10as the corresponding delivery place are correlated is also stored in thedelivery management DB 503. The structure of the vehicle managementinformation will be described below with reference to FIG. 6. FIG. 6illustrates a table structure of the vehicle management information, anda vehicle management information table includes a field of request userID, and a field of vehicle model, a field of vehicle color, and a fieldof vehicle number to which information (a vehicle model, a vehiclecolor, and a vehicle number) for identifying a vehicle 10 is input suchthat a delivery user can find the vehicle 10 when the vehicle 10 hasbeen selected as the delivery place by the request user. The vehiclemanagement information table also includes a field of vehicle positionto which position information on a position at which the vehicle 10 islocated is input. The position information of the vehicle 10 may beacquired by an input via the request user terminal 50 from the requestuser, or the position information of the vehicle 10 which is acquired bythe central server 400 may be acquired from the central server 400 viathe data communication device 350 mounted in the vehicle 10 asillustrated in FIGS. 12 and 13.

The control unit 502 transmits a delivery instruction to thecorresponding delivery user terminal 200 such that the delivery user candeliver luggage to the vehicle 10 based on the delivery information andthe vehicle management information which are correlated with the requestuser. The delivery instruction may be transmitted to the delivery userterminal 200 a plurality of times, not only one time. For example,delivery instructions associated with delivery on the next day may betransmitted together to the delivery user terminals 200 on the daybefore a scheduled delivery date and the delivery instructions may betransmitted again on the current day of the delivery date. When thedelivery information or the vehicle management information has beenupdated, the updated details are reflected at the time ofretransmission.

One of the functional elements of the delivery management server 500 orsome of the processes thereof may be embodied by another computerconnected to the network N1. A sequence of processes which are performedby the delivery management server 500 may be implemented in hardware ormay be implemented in software.

The central server 400 will be described below. The central server 400has a general configuration of a computer, and a basic hardwareconfiguration thereof is the same as the delivery management server 500.Specifically, the central server 400 includes a processor, a mainstorage unit, and an auxiliary storage unit which are not illustrated.Accordingly, in the central server 400, functions corresponding to apredetermined purpose can be realized by loading a program stored in theauxiliary storage unit into a work area of the main storage unit,executing the loaded program, and controlling the constituent units orthe like through execution of the program. The central server 400 alsoincludes a communication unit 401. The communication unit 401 isfunctionally the same as the communication unit 501 of the deliverymanagement server 500 and performs communication between the centralserver 400 and another device (for example, the delivery managementserver 500).

The central server 400 includes a user information DB 403 and anauthentication information DB 404 that store a variety of information inthe auxiliary storage unit. Such databases (DB) are constructed bycausing a program of a database management system which is executed bythe processor to manage data stored in the auxiliary storage unit. Theuser information DB 403 and the authentication information DB 404 are,for example, relational databases.

The user information DB 403 stores identification information of a userwho uses the vehicle 10 (for example, a delivery user who deliversluggage to the vehicle 10 or the like and a request user who receivesthe delivered luggage) and a corresponding password.

The authentication information DB 404 stores, for example,authentication information for a vehicle 10 which corresponds to theterminal authentication information. The authentication information forthe vehicle 10 is information which is correlated with theidentification information (a key ID) for the vehicle 10 and can be setto, for example, identification information specific to the key unit 100of the onboard unit 10A. The authentication information DB 404 may storeinformation on a validity period (which includes a validity time period)of the authentication information, whether the authenticationinformation is invalidated, and the like in addition to theauthentication information for the vehicle 10. The validity period ofthe authentication information may be transmitted to the delivery userterminal 200 along with the authentication information. When thevalidity period of the authentication information is received, thedelivery user terminal 200 can invalidate the authentication informationof which the validity period has expired by deleting the authenticationinformation. Information about whether the authentication is invalidatedindicates whether the authentication information has been transmitted tothe delivery user terminal 200 and is valid or whether the validityperiod has expired and the authentication information is invalid. Whenthe authentication information is transmitted to the delivery userterminal 200 and is valid, an authentication information managing unit4021 which will be described later can prohibit the authenticationinformation from being issued with overlapping validity periods andavoid duplicated issuance of the authentication information.

In the central server 400, a control unit 402 is embodied as afunctional unit by causing the processor to execute a program. Thecontrol unit 402 performs control associated with issuance ofauthentication information to the delivery user terminal 200 or thelike. Specifically, the control unit 402 includes an authenticationinformation managing unit 4021 and a locking/unlocking control unit 4022as functional units.

The authentication information managing unit 4021 controls issuance ofauthentication information for locking and unlocking the vehicle 10.Specifically, the authentication information managing unit 4021 receivesa request for transmission of authentication information for locking andunlocking the vehicle 10 from the delivery user terminal 200 via thedelivery management server 500. The authentication information managingunit 4021 receives information on the delivery user terminal 200 whichis a transmission destination of the authentication information alongwith the request for transmission of authentication information. Theauthentication information managing unit 4021 transmits authenticationinformation corresponding to the key unit 100 (terminal authenticationinformation) to the delivery user terminal 200 via the deliverymanagement server 500. The authentication information managing unit 4021may generate authentication information including information on avalidity period. When the authentication information includinginformation on the validity period has been received but the validityperiod has expired, the key unit 100 of the onboard unit 10A determinesthat the authentication information has been invalidated and does notperform locking and unlocking of the vehicle 10.

The body ECU 304 according to this embodiment will be described below indetail. The imaging processing unit 3043 captures a moving image in thecargo compartment 15 of the vehicle 10 by controlling the imaging device11 based on an ON/OFF signal output from the door switch 306 withopening and closing of the cargo compartment door 16 of the vehicle 10.Specifically, the imaging processing unit 3043 causes the imaging device11 to start capturing of a moving image when the door switch 306 hasbeen switched from an OFF state to an ON state with change of the cargocompartment door 16 from a closed state to an open state, and thencauses the imaging device 11 to end capturing of a moving image when thedoor switch 306 has been switched from the ON state to the OFF statewith change of the cargo compartment door 16 from the open state to theclosed state. The imaging processing unit 3043 stores the moving imagecaptured by the imaging device 11 as image data in the image storageunit 12. By controlling the imaging device 11 and storing an image inthe image storage unit 12 in this way, the body ECU 304 may serve as a“control device” in the claims.

Capturing of an image by the imaging device 11 is performed when adelivery user locks or unlocks the cargo compartment 15 of the vehicle10 using authentication information received by the delivery userterminal 200. That is, when a delivery user locks or unlocks the cargocompartment 15 using a one-time key, the locking/unlocking processingunit 3041 sends a signal indicating locking or unlocking to the imagingprocessing unit 3043, and the imaging processing unit 3043 havingreceived the signal controls the imaging device 11 such that a movingimage is captured. On the other hand, when a request user locks orunlocks the cargo compartment 15 of the vehicle 10 using authenticationinformation stored in the request user terminal 50, thelocking/unlocking processing unit 3041 does not send a signal indicatinglocking or unlocking of the cargo compartment 15 to the imagingprocessing unit 3043. Accordingly, even if a request user locks orunlocks the cargo compartment 15, capturing of a moving image by theimaging device 11 is not performed. When a request user locks or unlocksthe cargo compartment 15, capturing of an image by the imaging device 11may be performed similarly to the case of a delivery user.

The change determination processing unit 3042 performs a process ofdetermining whether luggage has been carried away (hereinafter alsoreferred to as a “change determining process”) based on an imagecaptured by the imaging device 11. By causing the change determinationprocessing unit 3042 to perform the change determining process, a“determination unit” in the claims may be embodied. The determinationunit may be provided in a vehicle, may be provided in a terminal of auser, or may be provided in a server that manages information onlocking/unlocking or a server that manages delivery. This changedetermining process is started, for example, with storage of an image inthe image storage unit 12 as a trigger when capturing of an image by theimaging device 11 ends. In the change determining process, the changedetermination processing unit 3042 extracts an image (hereinafterreferred to as a “reference image”) immediately after the cargocompartment door 16 in the vehicle 10 has switched from the closed stateto the open state (that is, immediately after a signal input from thedoor switch 306 to the body ECU 304 has been switched from the OFF stateto the ON state) and an image (hereinafter referred to as a “comparisonimage”) immediately after the cargo compartment door 16 in the vehicle10 has been switched from the open state to the closed state (that is,immediately after the signal input from the door switch 306 to the bodyECU 304 has been switched from the ON state to the OFF state) from amoving image stored in the image storage unit 12 and compares bothimages. The reference image and the comparison image may be stored inthe image storage unit 12 or may be stored in a memory (not illustrated)in the imaging processing unit 3043.

In order for the imaging processing unit 3043 to cause the imagingdevice 11 to capture a moving image in a period from a time point atwhich the signal from the door switch 306 has been switched from the OFFstate to the ON state to a time point at which the signal has beenswitched from the ON state to the OFF state, the change determinationprocessing unit 3042 can be said to compare an image at a start timepoint of the moving image captured by the imaging device 11 as areference image and an image at an end time point of the moving image asa comparison image with each other. Until the door switch 306 isswitched to the ON state after the cargo compartment 15 has beenunlocked, the cargo compartment door 16 is closed and thus a deliveryuser cannot access the cargo compartment 15. Accordingly, since thestate in the cargo compartment 15 does not change until the door switch306 is switched to the ON state after the cargo compartment 15 has beenlocked, the reference image can be said to be an image indicating thestate in the cargo compartment 15 when the cargo compartment 15 has beenunlocked. That is, the reference image can be said to be an image whichis captured at a time associated with a time at which the cargocompartment 15 is unlocked. Until the cargo compartment 15 is lockedafter the door switch 306 has been switched to the OFF state, the cargocompartment door 16 is in the closed state and thus a delivery usercannot access the cargo compartment 15. Accordingly, since the state inthe cargo compartment 15 does not change until the cargo compartment 15is locked after the door switch 306 has been switched to the OFF state,the comparison image can be said to be an image indicating the state inthe cargo compartment 15 when the cargo compartment 15 has been locked.That is, the comparison image can be said to be an image captured at atime associated with a time at which the cargo compartment 15 is locked.The reference image, the comparison image, and the moving image storedin the image storage unit 12 can be said to be images obtained bycausing the imaging device 11 to capture an image in the cargocompartment 15 at the times of locking/unlocking of the cargocompartment 15 (a predetermined area) with the locking/unlocking device300 in response to a request from the delivery user terminal 200.

The change determination processing unit 3042 compares the referenceimage with the comparison image and determines that existing luggage hasbeen carried away from the cargo compartment 15 when it is determinedthat luggage which is already present in the cargo compartment 15 in thereference image (hereinafter also referred to as existing luggage) isnot present in the cargo compartment 15 in the comparison image. Whenthere is no difference between the reference image and the comparisonimage as the result of comparison between the reference image and thecomparison image, the change determination processing unit 3042determines that luggage to be delivered has not been delivered, that is,that luggage has been carried away by a delivery user. When it isdetermined that an object which is not present in the cargo compartment15 in the reference image is present in the cargo compartment 15 in thecomparison image, the change determination processing unit 3042 maydetermine that luggage has been delivered by a delivery user. Thedetermination method in the change determination processing unit 3042 isnot particularly limited as long as it can determine that luggage hasbeen taken in or out of the cargo compartment 15 based on a referenceimage and a comparison image.

When it is determined that luggage has been carried away through thechange determining process, the change determination processing unit3042 stores the reference image and the comparison image in the imagestorage unit 12 as a reference image and a comparison image when theluggage has been carried away. When it is determined that luggage hasbeen delivered by a delivery user through the change determiningprocess, the change determination processing unit 3042 may delete themoving image, the reference image, and the comparison image stored inthe image storage unit 12 (which are hereinafter referred to as storedimage data) from the image storage unit 12 or may delete only the movingimage from the image storage unit 12. The stored image data may bestored in the image storage unit 12 when there is a margin in a memorycapacity of the image storage unit 12, and the stored image data may bedeleted from the oldest one when there is no margin in the memorycapacity.

When it is determined that luggage has been carried away through thechange determining process, the change determination processing unit3042 sends a signal indicating the determination result to the alarmprocessing unit 3044. When a signal from the change determinationprocessing unit 3042 has been received, the alarm processing unit 3044performs a predetermined notification process. The “predeterminednotification process” mentioned herein is, for example, a process ofoperating a notification unit 13 mounted in the vehicle 10. That is, thenotification unit 13 is activated when a signal indicating carrying-awayof luggage (hereinafter also referred to as a carrying-away signal) isreceived from the alarm processing unit 3044. The carrying-away ofluggage is notified to the surroundings by activation of thenotification unit 13. The notification can include a warning by sound(which includes ringing of a klaxon or outputting of voice indicatingcarrying-away of luggage) or turning-on or flickering of a lamp or thelike. Accordingly, a delivery user who is going to carry away luggagemay be warned or a third party near the vehicle 10 may be notified ofthe carrying-away of luggage. As illustrated in FIGS. 12 and 13 whichwill be described later, a carrying-away signal may be sent to thecentral server 400 or the request user terminal 50 via the datacommunication device 350 mounted in the vehicle 10. By causing the alarmprocessing unit 3044 to perform a predetermined notification process inthis way, the function of an “alarm unit” in the claims may be embodied.The notification unit may be provided in a vehicle, may be provided in aterminal of a user, or may be provided in a server that managesinformation for locking/unlocking or a server that manages delivery.

FIG. 7 is a flowchart illustrating a flow of processes of capturing andstoring a moving image for determining carrying-away of luggage. In thefollowing description, a process of capturing an image for determiningcarrying-away of luggage and storing the captured image is also referredto as an imaging process. In Step S101, the imaging processing unit 3043determines whether a signal from the door switch 306 has been switchedfrom the OFF state to the ON state. In Step S101, the imaging processingunit 3043 determines whether a start time of imaging by the imagingdevice 11 has been reached. When the determination result of Step S101is negative, the flow of processes ends. On the other hand, when thedetermination result of Step S101 is positive, the imaging processingunit 3043 starts capturing of a moving image by controlling the imagingdevice 11 in Step S102. Then, in Step S103, the imaging processing unit3043 determines whether the signal from the door switch 306 has beenswitched from the ON state to the OFF state. In Step S103, the imagingprocessing unit 3043 determines whether an end time of capturing amoving image by the imaging device 11 has been reached. When thedetermination result of Step S103 is negative, capturing of a movingimage by the imaging device 11 is continuously performed. On the otherhand, when the determination result is positive, the process flowtransitions to Step S104.

In Step S104, the imaging processing unit 3043 ends capturing of amoving image by controlling the imaging device 11 and stores the movingimage captured by the imaging device 11 in the image storage unit 12.Then, the imaging processing unit 3043 sends a signal indicating thatthe imaging has ended to the change determination processing unit 3042.When a still image is captured by the imaging device 11, the imagingprocessing unit 3043 captures a still image and stores the still imagein the image storage unit 12 instead of starting the capturing of amoving image in Step S102, and captures a still image and stores thestill image in the image storage unit 12 instead of ending the capturingof a moving image in Step S104.

The change determining process of determining whether carrying-away ofluggage has occurred based on the image stored in the image storage unit12 will be described below. FIG. 8 is a flowchart illustrating a flow ofthe change determining process. The change determining process accordingto this embodiment is performed by the onboard unit 10A. In Step S105,the change determination processing unit 3042 determines whether amoving image is stored in the image storage unit 12. When thedetermination result of Step S105 is negative, the process flow ends. Onthe other hand, when the determination result of Step S105 is positive,the process flow transitions to Step S106. In Step S106, the changedetermination processing unit 3042 extracts a reference image and acomparison image from the moving image stored in the image storage unit12. When the imaging processing unit 3043 causes the imaging device 11to capture a still image, the change determination processing unit 3042determines whether a reference image and a comparison image are storedin the image storage unit 12 in Step S105, and Step S106 is skipped.

The change determination processing unit 3042 compares the comparisonimage with the reference image in Step S107, and determines whethercarrying-away of luggage has occurred in Step S108. When thedetermination result of Step S108 is negative, the process flow ends. Onthe other hand, when the determination result of Step S108 is positive,the process flow transitions to Step S109 and the change determinationprocessing unit 3042 sends a carrying-away signal to the alarmprocessing unit 3044 and ends the process flow. The alarm processingunit 3044 having received the carrying-away signal from the changedetermination processing unit 3042 performs a predetermined notificationprocess.

The operation of the luggage management system 1 when the changedetermination processing unit 3042 determines that luggage has beencarried away will be described below with reference to FIG. 9. In theprocess flow illustrated in FIG. 9, when a delivery user arrives at thevicinity of a vehicle 10 in order to deliver luggage in response to adelivery request from a request user, the process of Step S11 isperformed, that is, a request for issuance of authentication informationis transmitted from the delivery user terminal 200 to the central server400 via the delivery management server 500. Then, the central server 400issues authentication information for the vehicle 10 correlated withidentification information of the request user based on theidentification information of the request user included in the deliveryinformation (the process of Step S12).

In Step S13, the issued authentication information is transmitted to thedelivery user terminal 200 via the delivery management server 500. Whenthe authentication information transmitted from the central server 400in this way is received by the delivery user terminal 200, an operationof locking and unlocking the cargo compartment 15 of the vehicle 10using the delivery user terminal 200 becomes possible.

Then, a process of unlocking the cargo compartment 15 of the vehicle 10using the delivery user terminal 200 is performed in Steps S21 to S24.In performing the processes of Steps S21 to S24, it is assumed that thedelivery user terminal 200 has been moved to a position at whichshort-range radio communication is set up between the key unit 100 ofthe vehicle 10 and the delivery user terminal 200 by the delivery user.

When a delivery user performs an operation of unlocking the vehicle 10via the input and output unit 204 of the delivery user terminal 200, thedelivery user terminal 200 transmits an unlocking request includingauthentication information to the key unit 100 in Step S21. Then, whenthe unlocking request transmitted from the delivery user terminal 200 isreceived by the key unit 100, the key unit 100 performs anauthentication process by comparing the authentication information(terminal authentication information) included in the unlocking requestwith the authentication information (device authentication information)stored in the storage unit 1041 in Step S22. When the authenticationusing both pieces of authentication information has succeeded, the keyunit 100 transmits an unlocking signal and a key ID to thelocking/unlocking device 300 in Step S23. When the unlocking signal andthe key ID transmitted from the key unit 100 are received by thelocking/unlocking device 300, the locking/unlocking device 300 performsan authentication process based on the received key ID in Step S24. As aresult, when the authentication has succeeded, the cargo compartment 15of the vehicle 10 is unlocked. At this time, the locking/unlockingdevice 300 may return an answerback or the like to the key unit 100.

In Step S31 to S38, a process of locking the vehicle 10 and a process ofassociated with the locking are performed using the delivery userterminal 200. When the delivery user opens the cargo compartment door 16through an unlocking process, performs a predetermined deliveryoperation, then closes the cargo compartment door 16, and performs anoperation of locking the vehicle 10 via the input and output unit 204 ofthe delivery user terminal 200, the delivery user terminal 200 transmitsa locking request including authentication information to the key unit100 in Step S31. When the locking request transmitted from the deliveryuser terminal 200 is received by the key unit 100, the key unit 100performs an authentication process by comparing the authenticationinformation (terminal authentication information) included in thelocking request transmitted from the delivery user terminal 200 withauthentication information (device authentication information) stored inthe storage unit 1041 in Step S32. When authentication using both piecesof authentication information has succeeded, the key unit 100 transmitsa locking signal and a key ID to the locking/unlocking device 300 inStep S33. When the locking signal and the key ID transmitted from thekey unit 100 are received by the locking/unlocking device 300, thelocking/unlocking device 300 performs an authentication process based onthe received key ID in Step S34. When the authentication has alsosucceeded, the cargo compartment 15 of the vehicle 10 is locked. The keyunit 100 transmits a notification indicating that locking has beencompleted (a locking notification) to the delivery user terminal 200(the process of Step S35) after transmitting the locking signal to thelocking/unlocking device 300. Accordingly, the notification indicatingthat locking has been completed is output onto the touch panel screen ofthe delivery user terminal 200.

When the delivery user ascertains that delivery of luggage has beencompleted from the locking notification, the delivery user inputs alatest delivery status, that is, a status indicating that delivery hasbeen completed, via the input and output unit 204 of the delivery userterminal 200 to update the delivery status in the delivery informationstored in the delivery management server 500 (the process of Step S36).Accordingly, the latest delivery status is transmitted from the deliveryuser terminal 200 to the delivery management server 500 (the process ofStep S37). As a result, in the delivery management server 500 havingreceived the latest delivery status, the control unit 502 updates thedelivery information (the process of Step S38). Regarding update of thedelivery status, instead of causing the delivery user to inputinformation therefor, when the delivery user terminal 200 receives thelocking notification from the key unit 100, the delivery user terminal200 may transmit an update command to set the delivery status tocompleted delivery to the delivery management server 500. When theauthentication information used by the delivery user terminal 200 in thecurrent delivery operation is a one-time key, the authenticationinformation acquired in Step S13 may be invalidated at a time at whichthe delivery user terminal 200 has received the locking notification inthe process of Step S35. That is, the authentication information storedin the storage unit of the delivery user terminal 200 may be deletedfrom the delivery user terminal 200 at the time at which the deliveryuser terminal 200 has received the locking notification.

When the cargo compartment 15 of the vehicle 10 is unlocked in Step S24,the locking/unlocking device 300 performs the imaging processillustrated in FIG. 7 in Step S41 and the locking/unlocking device 300performs the change determining process illustrated in FIG. 8 in StepS42. That is, when the delivery user opens the cargo compartment door 16and the door switch 306 is switched from the OFF state to the ON stateafter the cargo compartment door 16 of the vehicle 10 has been unlockedin Step S24, the locking/unlocking device 300 causes the imaging device11 to start capturing of an image. This capturing of an image iscontinuously performed until the delivery user closes the cargocompartment door 16 and the door switch 306 is switched from the ONstate to the OFF state. When the door switch 306 has been switched fromthe ON state to the OFF state, the change determining process isperformed. The locking/unlocking device 300 extracts a reference imageand a comparison image from the image storage unit 12 and compares bothimages. When it is determined as the comparison result between bothimages that luggage has been carried away, a predetermined notificationprocess is performed.

Even when it is determined through the change determining process thatluggage has been carried away, it is conceivable that luggage has notbeen actually carried away as a result of ascertainment of luggage bythe request user. That is, an error may occur in the change determiningprocess. On the other hand, the change determination processing unit3042 may learn the difference between the reference image and thecomparison image serving as the error in the current determination suchthat it does not affect determination in a subsequent change determiningprocess. Accordingly, it is possible to enhance determination accuracyin the change determining process. A request user sends a signalindicating that the current determination is erroneous to the onboardunit 10A via the communication unit 202 by operating the input andoutput unit 204 of the request user terminal 50. The changedetermination processing unit 3042 performs the learning in response tothat signal. The learning result is stored in a memory which is notillustrated.

According to the above-mentioned embodiment, when luggage has beencarried away in the luggage management system 1 in which a cargocompartment 15 of a vehicle 10 is used as a pickup and delivery place ofluggage, it is possible to contribute to improvement in security bygiving a notification. By storing an image captured by the imagingdevice 11 in the image storage unit 12, it is possible to store evidencefor carrying-away of luggage.

Modified Example 1 of First Embodiment

In the first embodiment, images at a time at which the ON/OFF state ofthe door switch 306 has changed are set as a reference image and acomparison image, but images at other times may be set as a referenceimage and a comparison image. That is, the reference image has only tobe an image obtained by imaging the cargo compartment 15 in the samestate as that at the time at which the cargo compartment 15 has beenunlocked, and the comparison image has only to be an image obtained byimaging the cargo compartment 15 in the same state as that at the timeat which the cargo compartment 15 has been locked. In the followingdescription, a time at which an image to be set as the reference imageis captured may be referred to as a first time, and a time at which animage to be set as the comparison image is captured may be referred toas a second time. The first time is a time associated with a time atwhich the cargo compartment 15 is unlocked, and the second time is atime at which the cargo compartment 15 is locked. The first time maycorrespond to an unlocking-associated time in the claims, and the secondtime may correspond to a locking-associated time in the claims. When theimaging device 11 captures a still image at the first time and thesecond time, the imaging processing unit 3043 causes the imaging device11 to capture a still image at the first time and the second time and tostore a reference image and a comparison image in the image storage unit12. The change determination processing unit 3042 performs a changedetermining process based on the reference image and the comparisonimage stored in the image storage unit 12.

For example, a time at which the door lock actuator 305 has unlocked thecargo compartment 15 may be set as the first time. In this case, a timeat which the locking/unlocking processing unit 3041 of the body ECU 304has sent an unlocking signal to the door lock actuator 305 is set as thefirst time. When the cargo compartment 15 has been unlocked, it can beestimated that the cargo compartment door 16 is opened thereafter. Sinceit is difficult to access the cargo compartment 15 from the outsidewhile the cargo compartment 15 is being locked, the state in the cargocompartment 15 when the cargo compartment door 16 was previously closedis considered to be kept at least until the cargo compartment 15 isunlocked. After the cargo compartment 15 has been unlocked, the cargocompartment door 16 can be opened and thus carrying-away of luggage isalso possible. Accordingly, by setting the time at which the door lockactuator 305 has unlocked the cargo compartment 15 as the first time,the change determining process based on the state in the cargocompartment 15 before luggage in the cargo compartment 15 is taken in orout can be performed. Since the same state as that in a predeterminedarea at a time point at which the vehicle has been unlocked has only tobe imaged, the imaging does not need to be performed at the time pointat which the vehicle has been unlocked.

For example, the time at which the door lock actuator 305 has locked thecargo compartment 15 may be set as the second time. In this case, thelocking/unlocking processing unit 3041 of the body ECU 304 sets a timepoint at which a locking signal has been transmitted to the door lockactuator 305 as the second time. When the cargo compartment 15 has beenlocked, it can be estimated that a current delivery user will not openthe cargo compartment door 16 thereafter. That is, after the cargocompartment 15 has been locked, it is thought that the state in thecargo compartment 15 does not change until a next delivery user opensthe cargo compartment door 16. Accordingly, the time at which the doorlock actuator 305 has locked the cargo compartment 15 can be said to bea time at which arrangement of luggage in the cargo compartment 15 issettled. By setting this time as the second time, the change determiningprocess based on the state in the cargo compartment 15 after a currentdelivery user has taken in or out luggage can be performed. Since thesame state as the state in the predetermined area at the time point atwhich the vehicle has been locked has only to be imaged, it is notnecessary to perform imaging at a time point at which the vehicle hasbeen locked.

The operation of the luggage management system 1 when the time at whichthe door lock actuator 305 has unlocked the cargo compartment 15 is setas the first time and the time at which the door lock actuator 305 haslocked the cargo compartment 15 is set as the second time and when thechange determination processing unit 3042 determines that luggage hasbeen carried away will be described below with reference to FIG. 10. InFIG. 10, the same processes as in the process flow illustrated in FIG. 9will be referred to by the same reference signs and description thereofwill not be repeated. When the cargo compartment 15 of the vehicle 10 isunlocked in Step S24, the locking/unlocking device 300 causes theimaging device 11 to start capturing of a moving image in Step S43. Whenthe cargo compartment 15 of the vehicle 10 is locked in Step S34, thelocking/unlocking device 300 causes the imaging device 11 to endcapturing of a moving image and stores the captured moving image in theimage storage unit 12 in Step S44. In Step S45, the locking/unlockingdevice 300 performs the change determining process illustrated in FIG.8.

For example, the time at which an unlocking signal has been transmittedfrom the key unit 100 to the locking/unlocking device 300 may be set asthe first time, and the time at which a locking signal has beentransmitted from the key unit 100 to the locking/unlocking device 300may be set as the second time.

For example, a time at which the short-range communication unit 103 ofthe key unit 100 and the short-range communication unit 201 of thedelivery user terminal 200 can perform short-range communicationtherebetween may be set as the first time. In this case, when theshort-range communication unit 103 of the key unit 100 and theshort-range communication unit 201 of the delivery user terminal 200 canperform short-range communication therebetween, the control unit 104 ofthe key unit 100 may transmit a signal indicating the state to thelocking/unlocking device 300 via the RF transmitter 102. This signal maybe transmitted from the comparison ECU 303 to the change determinationprocessing unit 3042 of the body ECU 304. Here, since a communicablestandard in a range in which the distance between the key unit 100 andthe delivery user terminal 200 is relatively small is used for theshort-range communication between the short-range communication unit 103of the key unit 100 and the short-range communication unit 201 of thedelivery user terminal 200, a radio field intensity decreases andcommunication is not possible when the key unit 100 and the deliveryuser terminal 200 is separated away from each other to a certain extent.Accordingly, when the short-range communication unit 103 of the key unit100 and the short-range communication unit 201 of the delivery userterminal 200 can perform short-range communication therebetween, it canbe estimated that the delivery user approaches the vehicle 10. In thisstate, since the cargo compartment door 16 is opened or closed orluggage is accommodated in the cargo compartment 15 thereafter, the timeat which the short-range communication is possible before the state inthe cargo compartment 15 has changed is set as the first time.

For example, a time at which the short-range communication unit 103 ofthe key unit 100 and the short-range communication unit 201 of thedelivery user terminal 200 have changed from a state in which theshort-range communication therebetween is possible to a state in whichthe short-range communication therebetween is not possible may be set asthe second time. In this case, when the short-range communication unit103 of the key unit 100 and the short-range communication unit 201 ofthe delivery user terminal 200 have changed from the state in which theshort-range communication therebetween is possible to the state in whichthe short-range communication therebetween is not possible, the controlunit 104 of the key unit 100 transmits a signal indicating the state tothe locking/unlocking device 300 via the RF transmitter 102. This signalis transmitted from the comparison ECU 303 to the change determinationprocessing unit 3042 of the body ECU 304. When the state in which theshort-range communication is possible has changed to the state in whichthe short-range communication is not possible, it can be thought that adelivery user carrying the delivery user terminal 200 moves away fromthe vehicle 10 and it can be estimated that luggage has not been takenin or out thereafter. In this way, when the state in which theshort-range communication is possible has changed to the state in whichthe short-range communication is not possible, the state in the cargocompartment 15 does not change thereafter and thus this time is set asthe second time.

The imaging processing unit 3043 may control the imaging device 11 suchthat a still image is captured at predetermined intervals. In this case,the first time and the second time may be determined by a request user,or an imaging time immediately before or after the cargo compartmentdoor 16 is opened may be set as the first time and an imaging timeimmediately before or after the cargo compartment door 16 is closed maybe set as the second time.

Modified Example 2 of First Embodiment

It is preferable that the imaging device 11 be disposed at a position atwhich a wide area in the cargo compartment 15 can be imaged. In theexample illustrated in FIG. 3, the imaging device 11 is disposed on theceiling of the cargo compartment 15 in the vicinity of the center of thecargo compartment 15 in the longitudinal direction of the vehicle 10 andin the vicinity of the center of the cargo compartment 15 in the lateraldirection of the vehicle 10. The position at which the imaging device 11is disposed is not limited to the example illustrated in FIG. 3, and maybe set to a position at which the entire range in the cargo compartment15 can be imaged. Here, when luggage is accommodated close to theimaging device 11, a dead angle may be formed in the imaging device 11due to the luggage and thus there is concern that accuracy of the changedetermining process may decrease. For example, even when luggage isarranged at a dead angle of the imaging device 11 or luggage arranged atthe dead angle is carried away, it may not be detected depending on animage captured by the imaging device 11.

Therefore, the imaging device 11 may be attached to the cargocompartment door 16. FIG. 11 is a diagram illustrating a state in whichthe imaging device 11 is attached to the cargo compartment door 16inside the cargo compartment 15. A hatched area in FIG. 11 represents arange which is imaged by the imaging device 11. In this case, theimaging device 11 is disposed such that the imaging device 11 can imagethe entire range in the cargo compartment 15 when the cargo compartmentdoor 16 is opened. Then, in the state in which the cargo compartmentdoor 16 has been opened, the distance between the imaging device 11 andthe inside of the cargo compartment 15 increases and the distancebetween the imaging device 11 and luggage increases in comparison withthe case illustrated in FIG. 3, and thus the dead angle of the imagingdevice 11 decreases even when luggage with the same size is accommodatedin the cargo compartment 15. Accordingly, it is possible to enhanceaccuracy of the change determining process. In this case, a moving imageis captured from a time point at which the cargo compartment 15 isunlocked to a time point at which the cargo compartment 15 is locked, areference image is extracted from the moving image captured immediatelyafter the cargo compartment door 16 has been opened, and a comparisonimage is extracted from the moving image captured immediately before thecargo compartment door 16 has been closed.

Second Embodiment

In the first embodiment, the change determination processing unit 3042in the vehicle 10 performs the change determining process, but thecentral server 400 performs the change determining process in a secondembodiment. FIG. 12 is a diagram schematically illustrating aconfiguration of a luggage management system 1 according to thisembodiment. FIG. 13 is a block diagram schematically illustrating anexample of configurations of an onboard unit 10A, a delivery userterminal 200, a request user terminal 50, a delivery management server500, and a central server 400 which constitute the luggage managementsystem 1 according to this embodiment. Differences from the firstembodiment will be mainly described below.

A data communication device 350 is provided in the onboard unit 10A. Thedata communication device 350 is a communication device that isconnected to the central server 400 via a network N1 and can transmitand receive data to and from the central server 400. The datacommunication device 350 includes a communication unit 351 and a controlunit 352. The communication unit 351 is communication means thatconnects the onboard unit 10A to the network N1. In this embodiment, thecommunication unit 351 can communicate with another device (for example,the central server 400) via the network N1 using a mobile communicationservice such as 3G (3^(rd) Generation) or LTE (Long Term Evolution).

The control unit 352 is a computer that takes charge of control of thedata communication device 350. The control unit 352 performs, forexample, a process of transmitting image data stored in the imagestorage unit 12 to the central server 400. The control unit 352 isconstituted, for example, by a microcomputer, and the functions ofperforming the above-mentioned processes are realized by causing a CPU(not illustrated) to execute a program stored in storage means (such asa ROM) (not illustrated). When a moving image captured by the imagingdevice 11 is stored in the image storage unit 12, the locking/unlockingprocessing unit 3041 sends a signal to the control unit 352 such thatimage data is transmitted to the central server 400. This image data isreceived by the control unit 352 via the body ECU 304, and the controlunit 352 transmits the image data to the central server 400 via thecommunication unit 351. This image data is transmitted in correlationwith identification information of a request user.

When the communication unit 401 of the central server 400 receives theimage data, the control unit 402 of the central server 400 stores theimage data in the image storage unit 405. The image storage unit 405stores the image data using an erasable programmable ROM (EPROM), a harddisk drive (HDD), a removable medium, or the like. The control unit 402of the central server 400 additionally includes a change determinationprocessing unit 4023 and an alarm processing unit 4024. The changedetermination processing unit 4023 performs a change determining processbased on the image data stored in the image storage unit 405. The changedetermining process is performed in the same way as the changedetermining process in the onboard unit 10A described in the firstembodiment. That is, the change determination processing unit 4023extracts a reference image and a comparison image from the moving image,compares both images, and determines whether luggage has been carriedaway.

Accordingly, the change determination processing unit 3042 does not needto be provided in the body ECU 304 of the locking/unlocking device 300.The imaging processing unit 3043 of the body ECU 304 may store onlystill images captured at the first time and the second time as areference image and a comparison image in the image storage unit 12, ormay store only images extracted from the moving image at the first timeand the second time as a reference image and a comparison image in theimage storage unit 12. In this case, since only the reference image andthe comparison image are transmitted to the central server 400 via thedata communication device 350, an amount of data to be transmitteddecreases in comparison with a case in which a moving image istransmitted.

When it is determined through the change determining process thatluggage has been carried away, the change determination processing unit4023 sends a signal indicating the fact to the alarm processing unit4024. When the signal from the change determination processing unit 4023is received, the alarm processing unit 4024 performs a predeterminednotification process. The “predetermined notification process” mentionedherein includes, for example, at least one of (1) a process oftransmitting a carrying-away signal to the onboard unit 10A to operatethe notification unit 13 mounted in the vehicle 10, (2) a process oftransmitting a carrying-away signal to the delivery user terminal 200,and (3) a process of transmitting a carrying-away signal to the requestuser terminal 50.

In the process of (1), the alarm processing unit 4024 transmits acarrying-away signal to the communication unit 351 of the datacommunication device 350 via the communication unit 401. When thecommunication unit 351 of the data communication device 350 receives thecarrying-away signal, the control unit 352 transmits the carrying-awaysignal to the alarm processing unit 3044 of the body ECU 304. The alarmprocessing unit 3044 having received the carrying-away signal performsthe same notification process as in the first embodiment.

In the process of (2), the alarm processing unit 4024 transmits thecarrying-away signal to the delivery user terminal 200 via thecommunication unit 401. When the communication unit 202 of the deliveryuser terminal 200 receives the carrying-away signal, the control unit203 displays a notification about carrying-away of luggage on the inputand output unit 204. In addition to the touch panel display, means thatgives a notification about carrying-away of luggage by sound orvibration may be provided in the input and output unit 204. In this way,it is possible to warn a delivery user who is going to carry awayluggage not to carry away luggage.

In the process of (3), the alarm processing unit 4024 transmits thecarrying-away signal to the request user terminal 50 via thecommunication unit 401. When the communication unit 51 of the requestuser terminal 50 receives the carrying-away signal, the control unit 52displays a notification about carrying-away of luggage on the input andoutput unit 53. In addition to the touch panel display, means that givesa notification about carrying-away of luggage by sound or vibration maybe provided in the input and output unit 53. In this way, it is possibleto give a notification about carrying-away of luggage to a request userwho carries the request user terminal 50. The alarm processing unit 4024may transmit a reference image and a comparison image along with thecarrying-away signal to the request user terminal 50. The referenceimage and the comparison image may be displayed on the touch paneldisplay.

FIG. 14 is a flowchart illustrating a flow of the change determiningprocess which is performed by the central server 400 when it isdetermined whether luggage has been carried away. In this embodiment,the change determining process is performed by the central server 400.

In Step S201, the change determination processing unit 4023 determineswhether a moving image is stored in the image storage unit 405. When thedetermination result of Step S201 is negative, the process flow ends. Onthe other hand, when the determination result of Step S201 is positive,the change determination processing unit 4023 extracts a reference imageand a comparison image from the moving image stored in the image storageunit 405 in Step S202. When the reference image and the comparison imageare transmitted from the onboard unit 10A to the central server 400, thechange determination processing unit 4023 determines whether a referenceimage and a comparison image are stored in the image storage unit 405 inStep S201, and skips Step S202. The change determination processing unit4023 compares the reference image with the comparison image in StepS203, and determines whether luggage has been carried away in Step S204.When the determination result of Step S204 is negative, the process flowends. On the other hand, when the determination result of Step S204 ispositive, the change determination processing unit 4023 transmits acarrying-away signal to the alarm processing unit 4024 in Step S205, andthen the process flow ends. The alarm processing unit 4024 havingreceived the carrying-away signal from the change determinationprocessing unit 4023 performs a predetermined notification process.

The operation of the luggage management system 1 when the changedetermination processing unit 4023 determines that luggage has beencarried away in this way will be described below with reference to FIG.15. The processes of Steps S11 to S13, Steps S21 to S24, and Steps S31to S38 are the same as in the process flow illustrated in FIG. 9, thusdescription thereof will not be repeated, and some thereof is notillustrated.

After the cargo compartment 15 of the vehicle 10 has been unlocked inStep S24, an imaging process is performed. That is, until the cargocompartment door 16 is closed after a delivery user has opened the cargocompartment door 16, the locking/unlocking device 300 causes the imagingdevice 11 to capture a moving image. When the cargo compartment door 16is closed and capturing of a moving image ends, the locking/unlockingdevice 300 stores the moving image in the image storage unit 12 (theprocess of Step S51). Then, image data is transmitted from thelocking/unlocking device 300 to the data communication device 350 (theprocess of Step S52), and the image data is transmitted from the datacommunication device 350 to the central server 400 (the process of StepS53). When the central server 400 receives the image data and stores theimage data in the image storage unit 405, a change determining process(the process flow illustrated in FIG. 14) is performed by the centralserver 400 (the process of Step S54). When the central server 400determines that luggage has been carried away through the changedetermining process, the central server 400 transmits a carrying-awaysignal to the data communication device 350 (the process of Step S55),and the carrying-away signal is transmitted from the data communicationdevice 350 to the locking/unlocking device 300 (the process of StepS56). Then, the locking/unlocking device 300 gives a notification aboutcarrying-away of luggage by sound or the like (the process of Step S57).In Step S57, the notification process of (1) is performed.

As described above, according to this embodiment, in the luggagemanagement system 1 in which a cargo compartment 15 of a vehicle 10 isused as a pickup and delivery place of luggage, when luggage has beencarried away, the central server 400 detects that luggage has beencarried away and thus it is possible to contribute to improvement insecurity.

In this embodiment, a period in which a one-time key is valid may benotified from the central server 400 to the onboard unit 10A, and amoving image may be captured with a start time point of the period asthe first time and an end time point of the period as the second time.

When the alarm processing unit 4024 receives the carrying-away signal,the alarm processing unit 4024 may take measures other than describedabove. These measures include a notification to the police, a managerwho manages the delivery management server 500, a manager who managesthe central server 400, and the like. In this case, this function isprovided in the delivery management server 500 or the central server400. For example, when the alarm processing unit 4024 of the centralserver 400 has received a carrying-away signal, the carrying-away signalmay be transmitted to the delivery management server 500 via thecommunication unit 401. When the communication unit 501 of the deliverymanagement server 500 receives the carrying-away signal, the controlunit 502 of the delivery management server 500 may perform anotification process.

In this embodiment, the central server 400 performs the changedetermining process, but the same function may be provided in thedelivery management server 500 or the request user terminal 50. Afunction of storing an image may be provided in the delivery managementserver 500 or the request user terminal 50. That is, the deliverymanagement server 500 or the request user terminal 50 may include animage storage unit that stores image data, a change determinationprocessing unit that performs the change determining process, and analarm processing unit that gives a notification when it is determinedthat luggage has been carried away. For example, image data transmittedfrom the data communication device 350 of the onboard unit 10A may bereceived by the communication unit 501 of the delivery management server500 or the communication unit 51 of the request user terminal 50.

When the onboard unit 10A performs the change determining process as inthe first embodiment and it is determined that luggage has been carriedaway, a carrying-away signal may be transmitted to the central server400 via the data communication device 350 and the alarm processing unit4024 of the central server 400 may perform a predetermined notificationprocess. In this case, the change determination processing unit 4023does not need to be provided in the central server 400, and thelocking/unlocking device 300 includes the change determinationprocessing unit 3042.

Modified Example 1 of Second Embodiment

When it is determined through the change determining process thatluggage has been carried away, the change determination processing unit4023 of the central server 400 stores a reference image and a comparisonimage in the image storage unit 405, but may not send a signalindicating the state to the alarm processing unit 4024. Even whenluggage has been carried away, a notification is not given at that timeand a reference image and a comparison image are merely stored in theimage storage unit 405. In this case, the alarm processing unit 4024does not need to be provided. Thereafter, in response to a request froma request user, the police, a manager who manages the deliverymanagement server 500, a manager who manages the central server 400, orthe like, the reference image and the comparison image are displayed.The central server 400 may be configured such that a display fordisplaying the reference image and the comparison image can be connectedto the central server 400. By storing image data in the image storageunit 405 of the central server 400 or in an image storage unit (notillustrated) of the delivery management server 500, it is possible tostore evidence for carrying-away of luggage. The central server 400 maytransmit the reference image and the comparison image to the requestuser terminal 50 in response to a request from the request user terminal50.

Image data may be stored in the image storage unit 405 of the centralserver 400 or the image storage unit 12 of the onboard unit 10A and thechange determining process may be performed when a request from arequest user or the like is received. That is, when a request user orthe like suspects that luggage has been carried away, the changedetermining process may be performed and it may be determined whetherluggage has been carried away. This request is issued by allowing arequest user to operate the input and output unit 53 of the request userterminal 50. For example, a request user issues the request by clickinga predetermined icon displayed on a touch panel display of the requestuser terminal 50. This request is transmitted to the onboard unit 10A orthe central server 400 via the communication unit 51. The central server400 or the onboard unit 10A performs the change determining process bycomparing the reference image and the comparison image. Similarly, afunction of storing image data may be provided in the deliverymanagement server 500 or the request user terminal 50 and image data maybe stored therein. The determination result of the change determiningprocess may be transmitted from the onboard unit 10A or the centralserver 400 to the request user terminal 50, and the determination resultmay be displayed on a touch panel display.

Third Embodiment

A third embodiment will be described below based on the luggagemanagement system 1 illustrated in FIGS. 12 and 13. This embodiment canbe similarly applied to the luggage management system 1 illustrated inFIGS. 1 and 2. In this embodiment, a comparison image at the time ofprevious delivery is set as a reference image at the time of currentdelivery. That is, it is assumed that the state in the cargo compartment15 has not changed from a time point corresponding to the second time inthe previous delivery to a time point corresponding to the first time inthe current delivery, and an image captured at the second time in theprevious delivery is used as a reference image in the current delivery.In this case, only a still image may be captured at the second time, ora moving image from the first time to the second time may be capturedsimilarly to the above-mentioned embodiment, the captured moving imagemay be stored at least in the image storage unit 12, then a still imageat the second time may be extracted from the moving image, and a stillimage at the time point corresponding to the first time may not beextracted. The conditions in the change determining process can beconsidered as the same as in the above-mentioned embodiment.Accordingly, it is possible to simplify the processes.

For example, in Step S202 in the flowchart illustrated in FIG. 14, thechange determination processing unit 4023 extracts only a comparisonimage from a moving image stored in the image storage unit 405 andstores the extracted comparison image in the image storage unit 405,instead of extracting a reference image and a comparison image from themoving image. In Step S203, the change determination processing unit4023 compares a comparison image stored in the image storage unit 405 inthe previous change determining process as a reference image in thecurrent change determining process with the comparison image stored inthe image storage unit 405 in the current change determining process.When the comparison of Step S203 is completed, the change determinationprocessing unit 4023 adds information indicating a next reference imageto the comparison image in the current change determining process andstores the image in the image storage unit 405. When the changedetermining process is performed at the first time, when a referenceimage which will be described later is reset, or the like, there is noreference image. Accordingly, in this case, the reference image may beacquired in the same way as in the second embodiment.

Modified Example 1 of Third Embodiment

Between the previous delivery and the current delivery, a request usermay take out existing luggage from the cargo compartment 15. In thiscase, a comparison image at the time of previous delivery cannot be setas a reference image at the time of current delivery. A case in which acargo compartment door 16 of a vehicle 10 is opened or closed by arequest user between the previous delivery and the current delivery willbe described below. When existing luggage is taken out by a requestuser, the state in the cargo compartment 15 at a time pointcorresponding to the second time in the previous delivery and the statein the cargo compartment 15 at a time point corresponding to the firsttime in the current delivery are different from each other, and thus thecomparison image in the previous delivery cannot be said to representthe state in the cargo compartment 15 when the cargo compartment 15 hasbeen unlocked or the cargo compartment door 16 has been opened in thecurrent delivery.

Therefore, in this modified example, it is inquired of a request userabout whether luggage has been taken out when the cargo compartment door16 is opened or closed by the request user, and an image captured at thefirst time in subsequent delivery is set as a reference image when aresponse indicating that luggage has been taken out is returned from therequest user. On the other hand, when a response indicating that luggagehas not been taken out is returned, the comparison image in the previousdelivery is used as a reference image in subsequent delivery.

Authentication information stored in the request user terminal 50 isdifferent from authentication information transmitted to the deliveryuser terminal 200. Accordingly, when a locking/unlocking request isreceived, the authentication unit 1042 of the key unit 100 can determinewhether the locking/unlocking request has been issued from the requestuser terminal 50 or from the delivery user terminal 200. A key IDtransmitted from the key unit 100 to the locking/unlocking device 300along with a locking/unlocking signal differs between when alocking/unlocking request is transmitted from the delivery user terminal200 and when a locking/unlocking request is transmitted from the requestuser terminal 50. Accordingly, when a locking/unlocking is received, thelocking/unlocking device 300 can determine whether the locking/unlockinghas been received from the request user terminal 50 or from the deliveryuser terminal 200.

When a locking/unlocking request is transmitted from the request userterminal 50, the body ECU 304 transmits a signal indicating that alocking/unlocking request has been received from the request userterminal 50 to the central server 400 via the data communication device350. The change determination processing unit 4023 of the central server400 having received the signal transmits a signal for inquiring aboutwhether luggage has been taken out (hereinafter also referred to as aninquiry signal) to the request user terminal 50 via the communicationunit 401. When the communication unit 51 of the request user terminal 50receives the inquiry signal, the control unit 52 displays an imageindicating whether luggage has been taken out on the input and outputunit 53. For example, an icon indicating that luggage has been taken outand an icon indicating that luggage has not been taken out are displayedon a touch panel display, and a sentence for promoting a request user toclick one icon is displayed on the touch panel display. When the requestuser operates the input and output unit 53 to input a response to theinquiry, the control unit 52 transmits the response to the centralserver 400 via the communication unit 51. When a response indicatingthat luggage has been taken out is returned from the request userterminal 50, the change determination processing unit 4023 of thecentral server 400 resets (deletes) the comparison image in the previousdelivery stored in the image storage unit 405. The inquiry signal may betransmitted from the locking/unlocking device 300 to the request userterminal 50. In this case, when a locking/unlocking request is receivedfrom the request user terminal 50, the body ECU 304 transmits a signalfor inquiring about whether luggage has been taken out to the requestuser terminal 50 via the data communication device 350. A response inputby allowing the request user to operate the input and output unit 53 istransmitted to the data communication device 350 via the communicationunit 51 by the control unit 52. Based on the response, the body ECU 304resets the comparison image in the previous delivery stored in the imagestorage unit 12. Thereafter, the imaging device may be caused to capturea new image and the captured image may be stored.

The operation of the luggage management system 1 when a request user hasreturned a response indicating that luggage has been taken out will bedescribed below with reference to FIG. 16. In Steps S1001 to S1004illustrated in FIG. 16, a process for unlocking a cargo compartment 15of a vehicle 10 is performed using a request user terminal 50. Inperforming the processes of Steps S1001 to S1004, it is assumed that therequest user terminal 50 is moved to a position at which short-rangeradio communication between the key unit 100 of the vehicle 10 and therequest user terminal 50 is set up by the request user.

When the request user performs an operation of unlocking the vehicle 10via the input and output unit 53 of the request user terminal 50, therequest user terminal 50 transmits an unlocking request includingauthentication information to the key unit 100 in Step S1001. Then, whenthe unlocking request transmitted from the request user terminal 50 isreceived by the key unit 100, the key unit 100 performs anauthentication process by comparing the authentication information(terminal authentication information) included in the unlocking requestwith the authentication information (device authentication information)stored in the storage unit 1041 in Step S1002. When the authenticationusing both pieces of authentication information has succeeded, the keyunit 100 transmits an unlocking signal and a key ID to thelocking/unlocking device 300 in Step S1003. When the unlocking signaland the key ID transmitted from the key unit 100 is received by thelocking/unlocking device 300, the locking/unlocking device 300 performsan authentication process based on the received key ID in Step S1004.When the authentication has succeeded, the cargo compartment 15 of thevehicle 10 is unlocked.

When the cargo compartment 15 of the vehicle 10 is unlocked, thelocking/unlocking device 300 transmits a signal for notifying ofunlocking (hereinafter also referred to as an unlocking notification) tothe central server 400 via the data communication device 350. Thecentral server 400 having received the unlocking notification inquiresof the request user about whether luggage has been taken out (theprocess of Step S1007). The signal for inquiry is transmitted from thecentral server 400 to the request user terminal 50 (the process of StepS1008) and the request user terminal 50 having received the signal ofinquiry displays an image for promoting the request user to return aresponse indicating whether luggage has been taken out on the touchpanel display (the process of Step S1009). When a response to theinquiry is input (the process of Step S1010), a signal based on theresponse is transmitted from the request user terminal 50 to the centralserver 400 (the process of Step S1011). Then, when the central server400 receives a response indicating that luggage has been taken out, thereference image stored in the central server 400 (a previous comparisonimage) is reset. The time at which a new reference image is captured maybe a time point corresponding to the first time in the current deliveryor may be any time before a time point corresponding to the first timein the subsequent or current delivery at which the request user operatesthe input and output unit 53 to input the response. That is, an imagereplacing the previous comparison image may be captured at any timebetween a time point at which a response has been returned from therequest user terminal and a time point corresponding to anunlocking-associated time.

As described above, according to this embodiment, since a previouscomparison image can be used as a current reference image, it ispossible to simplify the change determining process. When the requestuser has taken out luggage from the cargo compartment 15, a currentreference image is newly captured and thus it is possible to curb adecrease in accuracy when it is determined whether luggage has beencarried away from the cargo compartment 15.

Fourth Embodiment

A fourth embodiment will be described below based on the luggagemanagement system 1 illustrated in FIGS. 12 and 13. In this embodiment,whether luggage has been carried away from a cargo compartment 15 isdetermined by a delivery company that uses the delivery managementserver 500 or a request user who uses the request user terminal 50. Thedelivery company mentioned herein is a user who monitors whether adelivery user correctly performs delivery, unlike the delivery user whouses the delivery user terminal 200. This user is also referred to as adelivery management user.

The operation of the luggage management system 1 when the deliverymanagement user or the request user ascertains whether luggage has beencarried away in this way will be described below with reference to FIG.17. The processes of Steps S11 to S13, Steps S21 to S24, and Steps S31to S38 are the same as in the process flow illustrated in FIG. 9, theprocesses of Steps S51 to S53 are the same as in the process flowillustrated in FIG. 15, thus description thereof will not be repeated,and some thereof is not illustrated. When the central server 400receives image data in Step S53, the central server 400 transmits thereceived image data to the delivery management server 500 (the processof Step S61). The delivery management server 500 having received imagedata stores the image data in a storage unit (not illustrated) of thedelivery management server 500 (the process of Step S62). The deliverymanagement server 500 displays the image data on a display (notillustrated) of the delivery management server 500 in response to arequest from the delivery management user (the process of Step S63). Thedisplay may be, for example, a display which is included in a personcomputer or a mobile terminal connected to the delivery managementserver 500 via the network N1.

The central server 400 may transmit image data to the deliverymanagement server 500 only when a request has been received from thedelivery management server 500. Similarly, the locking/unlocking device300 may transmit image data to the central server 400 only when arequest has been received from the central server 400. The deliverymanagement user can ascertain whether a delivery user correctly performsdelivery by seeing an image displayed on the display in the process ofStep S63.

The central server 400 may transmit image data received via the datacommunication device 350 to the request user terminal 50 (the process ofStep S70). The request user terminal 50 having received the image datastores the image data in a storage unit (not illustrated) of the requestuser terminal 50 (the process of Step S71). The image data is displayedon the input and output unit 53 of the request user terminal 50 inresponse to a request from the request user (the process of Step S72).The request user can determine whether luggage has been carried away byseeing the image. The central server 400 may transmit the image data tothe request user terminal 50 only when a request has been received fromthe request user terminal 50. One side of the processes of Steps S61 toS63 and the processes of Steps S70 to S72 may be performed or both sidesthereof may be performed. The image data which is transmitted in StepsS52, S53, S61, and S70 may include only the reference image and thecomparison image, include a moving image in addition to the referenceimage and the comparison image, or include only a moving image.

According to this embodiment, since the delivery management user or therequest user determines whether luggage has been carried away from thecargo compartment 15, the change determination processing unit does notneed to be provided in the central server 400 or the locking/unlockingdevice 300. Accordingly, it is possible to simplify the luggagemanagement system 1. Since image data is stored in one or more of theonboard unit 10A, the central server 400, the delivery management server500, and the request user terminal 50, evidence for carrying-away can beleft even when luggage has been carried away.

Fifth Embodiment

A fifth embodiment will be described below based on the luggagemanagement system 1 illustrated in FIGS. 12 and 13. In this embodiment,the central server 400 performs the change determining process. When thecentral server 400 determines that luggage has been carried away, imagedata and a carrying-away signal are transmitted to the request userterminal 50. The request user terminal 50 gives a notification to therequest user.

The operation of the luggage management system 1 when the request userterminal 50 gives a notification to the request user in this way will bedescribed below with reference to FIG. 18. The processes of Steps S11 toS13, Steps S21 to S24, and Steps S31 to S38 are the same as in theprocess flow illustrated in FIG. 9, thus description thereof will not berepeated, and some thereof is not illustrated. The processes of StepsS51 to S53 are the same as in the process flow illustrated in FIG. 17and thus description thereof will not be repeated. When the centralserver 400 receives image data transmitted from the data communicationdevice 350 and the image data is stored in the image storage unit 405,the central server 400 performs the change determining process (theprocess flow illustrated in FIG. 14) (the process of Step S81). Then,when it is determined through the change determining process thatluggage has been carried away, a carrying-away signal and image data aretransmitted from the central server 400 to the request user terminal 50(the process of Step S82). The request user terminal 50 having receivedthe carrying-away signal and the image data stores the image data in astorage unit (not illustrated) of the request user terminal 50 (theprocess of Step S83) and gives a notification to the request user bydisplaying a notification indicating that luggage has been carried awayon the display of the request user terminal 50 (the process of StepS84). In the process of Step S84, the request user terminal 50 mayadditionally display a reference image and a comparison image on thedisplay.

According to this embodiment, the central server 400 can determinewhether luggage has been carried away from the cargo compartment 15, anda notification can be rapidly given to a request user when luggage hasbeen carried away. Accordingly, it is possible to promote a request userto ascertain luggage.

Sixth Embodiment

A sixth embodiment will be described below based on the luggagemanagement system 1 illustrated in FIGS. 12 and 13. In this embodiment,the delivery management server 500 performs the change determiningprocess and transmits a carrying-away signal to the delivery userterminal 200 when it is determined that luggage has been carried away.Then, the delivery user terminal 200 gives an alarm to the deliveryuser. FIG. 19 is a block diagram schematically illustrating an exampleof a configuration of the delivery management server 500. The controlunit 502 of the delivery management server 500 includes a changedetermination processing unit 5021 that performs a change determiningprocess in the same way as the change determination processing unit 4023of the central server 400 illustrated in FIG. 13 and an alarm processingunit 5022 that performs a predetermined alarming process in the same wayas the alarm processing unit 4024 of the central server 400 illustratedin FIG. 13. The delivery management server 500 includes an image storageunit 504 that stores image data in the same way as the image storageunit 405 of the central server 400 illustrated in FIG. 13. The centralserver 400 according to this embodiment does not need to include thechange determination processing unit 4023, the alarm processing unit4024, and the image storage unit 405.

The operation of the luggage management system 1 when the delivery userterminal 200 gives a notification to the delivery user will be describedbelow with reference to FIG. 20. The processes of Steps S11 to S13,Steps S21 to S24, and Steps S31 to S38 are the same as in the processflow illustrated in FIG. 9, thus description thereof will not berepeated, and some thereof is not illustrated. The processes of StepsS51 to S52 are the same as the process flow illustrated in FIG. 17 andthus description thereof will not be repeated. The data communicationdevice 350 transmits image data to the delivery management server 500(the process of Step S91). The image data may be transmitted to thedelivery management server 500 via the central server 400. When thecommunication unit 501 of the delivery management server 500 receivesthe image data transmitted from the data communication device 350, thecontrol unit 502 stores the image data in the image storage unit 504 ofthe delivery management server 500. When the image data is stored in theimage storage unit 504, the control unit 502 of the delivery managementserver 500 performs a change determining process (the process of StepS92). In the change determining process, the change determinationprocessing unit 4023 of the central server 400 in the process flowillustrated in FIG. 14 can be replaced with the change determinationprocessing unit 5021, the alarm processing unit 4024 of the centralserver 400 can be replaced with the alarm processing unit 5022, and theimage storage unit 405 of the central server 400 can be replaced withthe image storage unit 504. When the change determination processingunit 5021 determines that luggage has been carried away through thechange determining process, the alarm processing unit 5022 performs apredetermined notification process. Through the predeterminednotification process, a carrying-away signal is transmitted from thedelivery management server 500 to the delivery user terminal 200 (theprocess of Step S93). The delivery user terminal 200 having received thecarrying-away signal informs of the delivery user by displaying anotification indicating that luggage has been carried away on a touchpanel display of the delivery user terminal 200 (the process of StepS94).

Here, erroneous determination may be performed in the change determiningprocess. That is, the delivery user has not carried away luggage but itmay be determined that luggage has been carried away. Examples of thiscase include a case in which existing luggage does not appear in acomparison image or a case in which currently delivered luggage does notappear in the comparison image. For example, when existing luggage isarranged at a dead angle of currently delivered luggage, erroneousdetermination may be performed. In this case, the delivery user mayperform adjustment such that all pieces of luggage are imaged by theimaging device 11 by opening the cargo compartment door 16 again andmoving positions of the pieces of luggage. Thereafter, a comparisonimage may be acquired again and the change determining process may beperformed again. In this case, the delivery user operates the deliveryuser terminal 200 to request the delivery management server 500 toperform the change determining process again. That is, when the deliveryuser clicks a predetermined icon displayed on the input and output unit204 of the delivery user terminal 200 with the alarm, the control unit203 transmits a signal indicating a request for performing the changedetermining process again to the delivery management server 500 via thecommunication unit 202 (the process of Step S95). The delivery useropens the cargo compartment door 16 again and moves the luggage. Withthis operation, the locking/unlocking device 300 captures a moving imageagain (the process of Step S96). In Step S96, the same process as inStep S51 is performed. Newly acquired image data is transmitted to thedelivery management server 500 via the data communication device 350(the process of Steps S97 and S98). When the communication unit 501 ofthe delivery management server 500 receives the image data transmittedfrom the data communication device 350, the control unit 502 stores theimage data in the image storage unit 504 of the delivery managementserver 500. The delivery management server 500 performs the changedetermining process again. In this change determining process, an imagecaptured when the cargo compartment door 16 is opened or closed in theprevious delivery in Step S203 in the process flow illustrated in FIG.14, that is, at the first time in the process of Step S51, is set as areference image, and an image captured when the cargo compartment door16 is opened or closed in the current delivery, that is, at the secondtime in the process of Step S96, is set as a comparison image.

According to this embodiment, as described above, the deliverymanagement server 500 determines whether luggage has been carried awayfrom the cargo compartment 15, and a notification is rapidly given to adelivery user when luggage has been carried away. The delivery userhaving received the alarm can correct erroneous determination in thechange determining process by adjusting a position of luggage and thenrequesting the change determining process again.

Seventh Embodiment

A seventh embodiment will be described below based on the luggagemanagement system 1 illustrated in FIGS. 12 and 13. This embodiment canbe similarly applied to the luggage management system 1 illustrated inFIGS. 1 and 2. In this embodiment, a sheet 151 that detects a mass ofluggage is provided on a bottom surface of the cargo compartment 15, anddetermination is performed in consideration of change in mass of luggagein the cargo compartment 15 in addition to comparison between thereference image and the comparison image (hereinafter simply referred toas comparison between images) described above in the embodiments when itis determined whether luggage has been carried away. FIG. 21 is adiagram schematically illustrating a configuration of a sheet 151. InFIG. 21, first luggage 15A is luggage which is accommodated by adelivery user A (existing luggage) and second luggage 15B is luggagewhich is accommodated by a delivery user B.

The sheet 151 is laid on the entire bottom surface of the cargocompartment 15 and detects a pressure applied to the sheet for eachpredetermined area. Accordingly, an area in which luggage is disposed, asize of luggage, and a mass of luggage can be detected for each piece ofluggage. The sheet 151 transmits a signal corresponding to an area inwhich luggage is disposed, a size of luggage, and a mass of luggage tothe body ECU 304. Accordingly, the body ECU 304 can ascertain the numberof pieces, the size, and the mass of luggage which is accommodated inthe cargo compartment 15. In this embodiment, since a mass of luggagehas only to be detected, for example, change in height of a vehicle 10may be detected by a sensor or the like and a mass of luggage may bedetected based on the change in height of the vehicle 10 instead ofusing the sheet 151. This sensor may detect the change in height of thevehicle 10 by detecting change in an amount of depression of asuspension. In this embodiment, the sheet 151 serves as a mass detectingunit in the claims.

When the second luggage 15B is disposed in a state in which the firstluggage 15A is disposed, the total mass of luggage in the cargocompartment 15 increases by the mass of the second luggage 15B.Accordingly, when an increase corresponding to the mass of the secondluggage 15B is not detected between the first time and the second time,it can be thought that carrying-away of luggage has occurred. On theother hand, when an increase corresponding to the mass of the secondluggage 15B is detected, it can be thought that carrying-away of luggagehas not occurred. Since it is also conceivable that a delivery userdisposes luggage having the same mass instead of the second luggage 15B,determination of whether luggage has been carried away is performed inconsideration of a result of comparison between images in addition to aresult of comparison between masses.

Information of a mass of luggage is included in delivery informationwhich is stored in the delivery management DB 503 of the deliverymanagement server 500. A mass of luggage is measured by a request useror a delivery company and is input as attribute information to the fieldof luggage attributes illustrated in FIG. 5. For example, when thedelivery management server 500 receives registration of luggage from arequest user terminal 50, the information of a mass of luggage istransmitted from the request user terminal 50 to the delivery managementserver 500. In this embodiment, the delivery management DB 503 serves asa mass acquiring unit in the claims. The change determination processingunit 4023 of the central server 400 compares the mass of luggage storedin the delivery management DB 503 with an increase in the total mass ofluggage in the cargo compartment 15 which is detected by the sheet 151,determines that luggage has not been carried away when there is nodifference therebetween or when there is a difference therebetween butthe difference is within an error range, and determines that luggage hasbeen carried away when there is a difference therebetween or when thedifference is out of the error range. When the comparison result inimage and the comparison result in mass are equal, the changedetermination processing unit 4023 employs the comparison result. Thatis, the change determination processing unit 4023 determines thatluggage has been carried away based on the comparison result in image,and transmits a carrying-away signal to the alarm processing unit 4024only when it is determined that luggage has been carried away based onthe comparison result in mass. When the comparison result in image andthe comparison result in mass are different, the change determinationprocessing unit 4023 may transmit a signal indicating the difference tothe alarm processing unit 4024, and the alarm processing unit 4024 mayperform a notification process based on the signal.

FIG. 22 is a flowchart illustrating a process flow of detecting a massof luggage for determining whether luggage has been carried away. Thisprocess flow is performed in parallel with an imaging process. In thefollowing description, a process of calculating a mass of luggage fordetermining whether luggage has been carried away is also referred to asa mass calculating process. In Step S401, the body ECU 304 determineswhether a signal from the door switch 306 has changed from the OFF stateto the ON state. In Step S401, the body ECU 304 determines whether it isa time to detect a mass of luggage using the sheet 151. When thedetermination result of Step S401 is negative, the process flow ends. Onthe other hand, when the determination result of Step S401 is positive,the body ECU 304 detects a mass of luggage by controlling the sheet 151in Step S402. The mass which is detected at this time is a total mass ofluggage in the cargo compartment 15. The mass of luggage is stored in astorage unit (not illustrated) by the body ECU 304. Then, in Step S403,the body ECU 304 determines whether the signal from the door switch 306has changed from the ON state to the OFF state. In Step S403, the bodyECU 304 determines whether it is a time to detect a mass of luggageusing the sheet 151. When the determination result of Step S403 isnegative, the process of Step S403 is performed again. On the otherhand, when the determination result of Step S403 is positive, the bodyECU 304 detects a mass of luggage by controlling the sheet 151 in StepS404. The mass which is detected at this time is a total mass of luggagein the cargo compartment 15. The mass of luggage is stored in a storageunit (not illustrated) by the body ECU 304. In Step S405, by subtractingthe mass detected in Step S402 from the mass detected in Step S404, amass increased in the cargo compartment 15 in the current delivery iscalculated. The mass increased in the cargo compartment 15 in thecurrent delivery, which is calculated at this time, is stored in astorage unit (not illustrated) by the body ECU 304. When luggage hasbeen carried away, the mass may have a negative value.

When the mass increased in the cargo compartment 15 in the currentdelivery is calculated and stored in the storage unit, the body ECU 304transmits a signal to the control unit 352 of the data communicationdevice 350 such that the increased mass (hereinafter also referred to asa comparison mass) is transmitted to the central server 400. The controlunit 352 receives the comparison mass via the body ECU 304 and thecontrol unit 352 transmits the comparison mass to the central server 400via the communication unit 351. The comparison mass is transmitted incorrelation with identification information of a request user. When thecommunication unit 401 of the central server 400 receives the comparisonmass, the control unit 402 of the central server 400 stores thecomparison mass in a storage unit which is not illustrated.

A change determining process according to this embodiment will bedescribed now. FIG. 23 is a flowchart illustrating a flow of the changedetermining process. Steps in which the same processes as in theflowchart illustrated in FIG. 14 will be referred to by the samereference signs and description thereof will not be repeated. The changedetermining process according to this embodiment is performed by thecentral server 400.

In the flowchart illustrated in FIG. 23, Step S501 is performed afterStep S203. In Step S501, it is determined whether luggage has beencarried away. When the determination result of Step S501 is negative,the process flow transitions to Step S505. On the other hand, when thedetermination result of Step S501 is positive, the change determinationprocessing unit 4023 acquires data of the mass of luggage from thedelivery management server 500 in Step S502. The control unit 402 of thecentral server 400 transmits a signal for requesting data of the mass ofluggage stored in the delivery management DB 503 to the deliverymanagement server 500 via the communication unit 401. This signal istransmitted in correlation with identification information of a requestuser. The control unit 502 of the delivery management server 500 havingreceived the signal via the communication unit 501 extracts thecorresponding mass of luggage (hereinafter also referred to as areference mass) from the delivery management DB 503 and transmits theextracted mass of luggage to the central server 400. When thecommunication unit 401 of the central server 400 receives the referencemass, the control unit 402 of the central server 400 stores thereference mass in a storage unit which is not illustrated.

In Step S503, the change determination processing unit 4023 compares thereference mass with the comparison mass and determines that luggage hasnot been carried away when there is no difference between the referencemass and the comparison mass or when there is a difference therebetweenbut the difference is within an error range. In Step S504, the changedetermination processing unit 4023 determines whether luggage has beencarried away. When the determination result of Step S504 is positive, itis determined that luggage has not been carried away based on thecomparison result in image and the comparison result in mass and thusthe process flow ends. On the other hand, when the determination resultof Step S504 is negative, the process flow transitions to Step S505. InStep S505, since it is determined that luggage has been carried awaybased on the comparison result in image and the comparison result inmass, a carrying-away signal is transmitted to the alarm processing unit4024 and the process flow ends. The alarm processing unit 4024 havingreceived the carrying-away signal from the change determinationprocessing unit 4023 performs a predetermined notification process.

In the flowchart illustrated in FIG. 23, when it is determined thatluggage has been carried away based on at least one of the comparisonresult in image and the comparison result in mass, the alarm processingunit 4024 performs a predetermined notification process. However, whenit is determined that luggage has been carried away based on both of thecomparison result in image and the comparison result in mass, the alarmprocessing unit 4024 may perform a predetermined notification process.That is, when the comparison result in image and the comparison resultin mass are equal, the result may be employed for determining whetherluggage has been carried away. On the other hand, when both results aredifferent, it may be determined that luggage has been carried away forthe purpose of security.

According to this embodiment, since whether luggage has been carriedaway based on images and masses as described above, it is possible tocurb erroneous determination.

What is claimed is:
 1. A server, comprising: a processor configured to:communicate with a communication device mounted on a vehicle, obtain afirst image from the communication device, and determine whether aluggage has been carried away from an inside of a predetermined area ofthe vehicle based on the first image, wherein the processor isconfigured not to determine whether the luggage has been carried awayfrom the inside of the predetermined area of the vehicle in a case wherethe vehicle is unlocked in response to a request from a request userterminal, and the request user terminal is a terminal used by a user whoreceives the luggage delivered to the predetermined area, and therequest user terminal is configured to request a locking/unlockingdevice mounted in the vehicle to lock and unlock the vehicle.
 2. Theserver according to claim 1, wherein the processor is configured toobtain a second image from the communication device, and determinewhether the luggage has been carried away from the inside of thepredetermined area of the vehicle based on a result of comparisonbetween the first image and the second image, the predetermined area isused as a delivery place of the luggage, the first image is an imagecaptured by an imaging device at a previous locking-associated timeassociated with a time at which the vehicle is locked previously, andthe second image is an image captured by an imaging device at a currentlocking-associated time associated with a time at which the vehicle islocked currently.
 3. The server according to claim 1, wherein theprocessor is configured to send an inquiry to a request user terminalabout whether the luggage has been taken out from the predetermined areawhen the vehicle is unlocked in response to a request from the requestuser terminal, and not to determine whether the luggage has been carriedaway from the inside of the predetermined area of the vehicle based onthe first image in a case where the request user terminal returns aresponse indicating that the luggage has been taken out in response tothe inquiry.
 4. The server according to claim 3, wherein the processoris configured to perform a predetermined notification process to therequest user terminal when the processor determines that the luggage hasbeen carried away from the predetermined area.